{"report_id":"70636203-0fd4-4bd2-932c-45038d58fb45","version":0,"status":"done","tags":[],"date":"2026-08-18T13:49:41Z","url":{"schema":"http","addr":"exxtb.com/","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"title":"XTB","dom":{"size":70796,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58527)","md5":"e52749de755cf91df9844a5e54d999c6","sha1":"12630e4ef92b31f2ac29291ff2af5ba9aafa4819","sha256":"9932e14c62d449f2600ed416f7272bf764f682a705278a500fb06e016e19d187","sha512":"82acf84768ea98f342d49d0e0eb595190dd3c16f61278dc92dd40f9fc52ea3047ba12aefd6add61f5ace471a45cabd17d8af4dc858893233431add23b3701110","ssdeep":"1536:D0ZaJcRu6tFmSb2D120C2VC2sD2OA2rl2tq2cu2u12Zl2cS2B/2Eb2282wpi2hG1:D0oKqUBJwY5eJouY9a4b53U5j0","tlshash":"d6634261b154127a816b97c4e4213f297ab3eb2fc24ec4542eec91a34fc7cb4f966c94","dom_hash":"domhash515f8333df13caa51f2e147f3cce1916","first_seen":"2026-08-18T13:49:53.099985Z","last_seen":"2026-08-18T13:49:53.099985Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exxtb.com/","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T13:49:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"storage.googleapis.com","ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-08-17T13:34:46.045641Z","alert_count":0,"request_count":22,"received_data":1575992,"sent_data":12496,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-16T22:46:07.924415Z","alert_count":0,"request_count":2,"received_data":261116,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"exxtb.com","ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-08-18T13:40:45.502443Z","last_seen":"2026-08-18T13:40:45.502443Z","alert_count":170,"request_count":34,"received_data":5649950,"sent_data":15756,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"h5-api.info-wss.top","ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2025-07-06","domain_rank":0,"first_seen":"2026-07-17T15:54:15.250891Z","last_seen":"2026-08-18T13:40:46.45751Z","alert_count":0,"request_count":61,"received_data":662296,"sent_data":32235,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exxtb.com/assets/js/web3-20260611200355-BLSvnMTs.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca14fef652f448032fb3a65639eb3968","sha1":"b516b3c00008bdb68ac3fd9739455ae0216c71f2","sha256":"8826eba2de7441f5cd9e4b52a57cd29646dc3f1315eacb5d66199321abc92c24","sha512":"cd67c1fcb412c9728f5d82d037f8c8cc3cb548b8ce47ea0a5ec971ab54e06e819c22f012b7e2bcf283ad63fb9775f79b1eaff69a5e182b552da4895ab8ffea8d","ssdeep":"","tlshash":"f781a499f6a0b0b00d4bc5e0e1ff2126607123ac762b895064a7899725fa84fc57f66b","size":3937,"data":"","first_seen":"2026-07-17T15:46:22.916169Z","last_seen":"2026-08-18T13:49:53.145682Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2c76cf27c5ca9b36f2bdb935339fcc7","sha1":"65bd2f10520ea0c1fb8eacfe74f1bd3ebe1a48b8","sha256":"ba6532ed0a586fec57642c956be26eeebf85f72987dc4915c501f26dcb1b2ee7","sha512":"0b9e3f03f0ea7ab25a4c7fc5f33eb7271f95d9d80f21eb51345c1863ae7ecf0ff5d8132d43372defae52a4bdef07be49d4e34da09dd14d2601a48ecb88d3d0ef","ssdeep":"","tlshash":"7f11abfe2a5ab02d6303405e976b7911742160a9000a585173cc9e9dab9afadd0cbb8d","size":1040,"data":"","first_seen":"2026-07-17T15:46:22.930517Z","last_seen":"2026-08-18T13:49:53.278528Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-19T18:04:15.928738Z","times_seen":41679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-19T18:04:15.929882Z","times_seen":43108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-08-18T13:51:38.077454Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-08-18T13:49:53.281542Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/charting_library/charting_library.min.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-19T20:09:07.785956Z","times_seen":1370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-19T11:24:15.120194Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"2e4a7e90831c1bdb26e2ce6df106a83d","sha1":"5923251fbec594eeba41afbfac24af5ee0e74d56","sha256":"6fc754e914ddb5d93f11d74413c8e9e0db331bbc04f357c8725c824b496c3db9","sha512":"03ce6da278085fad75e631597676ce71c0e5891687222594a0620581188e4e9b72f649d0262e9bd91c8cbfe1076c492d0b5389df988e74068ff6f79a1abb55b0","ssdeep":"","tlshash":"c7c08cc8b0c36d002602781055af34e99024802bb0489b128cd4fc5d2e230b09233eac","size":146,"data":"","first_seen":"2024-12-18T14:57:20.727033Z","last_seen":"2026-08-18T13:49:53.282846Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/i18n-20260611200355-8tVcdWZO.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"df1705a875b7e72c0a9c5b230acd677f","sha1":"e86b0b99668bf26759c31e7c42abdb38b4239726","sha256":"c1f83a0a40565d542c451364b2de0bcc33b100dcbe340c244ce76a137504a222","sha512":"acf7ddfd79d67919b88f90719b2398c1d0e67ac83f15021bb68b684e3a3a8490c9a949f650c66ebcb5964b531fa68937d29f6187ccfb9a6bc1f56f93d2a33e48","ssdeep":"768:3tX6hY9Veagrl0nFUi7iHC8LBbXlpPpaUcnDWQ3E8y564aBxY6ixzRpxaeEbew3:3ayww8LBjYDWYoY4R/aSC","tlshash":"5bc2d7c339e77016977681e2757311926f2c0b99341fd9c9b8b9978b3b2ac4d03b6b24","size":26531,"data":"","first_seen":"2026-07-17T15:46:22.790351Z","last_seen":"2026-08-18T13:49:53.252726Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-08-18T13:49:53.283554Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-08-18T13:58:17.562234Z","times_seen":1684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-08-18T13:49:53.285515Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-08-18T13:49:53.286152Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-08-18T13:52:07.693464Z","times_seen":1158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-08-18T19:04:58.240312Z","times_seen":1178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"56ed1dc7a7c7c4d0135776e306ae9bcb","sha1":"18d8914c8d7a21ea2f664080fcbcaf0c942c3ac1","sha256":"055cb83a18d103da0b9e79549d4ca0aaa5b2c7445ede7bf18317c53d8d18570e","sha512":"3f4c3d523962372f297e9aab82917e8d07f1b8f69c4a1fa2ee8e3721d73001e60707bc6de4111ca20196ffefd97f3df6b2f07211b3841f397635d05b9cd4e2e9","ssdeep":"","tlshash":"b7c012d8b0c66d002616a41028af28e8a0288026b44c1b968da4ec592a620f48227ead","size":170,"data":"","first_seen":"2025-10-12T16:34:39.92057Z","last_seen":"2026-08-18T13:49:53.287968Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"b60a2fe4310f25d7824536b6a1e697b0","sha1":"b1b2f5cdda4a1ddbeb01cfdffa9bef2293b692f4","sha256":"92f8551cc981825b303bebbfa6afd1538f69600db62e9723506926b5636027bd","sha512":"5486ea1d943b63594e8c994649e10b25a67945ef222ed768c2a523c2abd5e6f2194f017a8f9119a0da2b9cda115a7a8547c16b1bdbc4d7ebfed2c766114d4baa","ssdeep":"","tlshash":"48c08cc4b0c22d242606682014bfb4e49024402770885b028c98e84c2e220b09233fa8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.958543Z","last_seen":"2026-08-18T13:49:53.288587Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-08-18T13:49:53.289328Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"b9feffaf88a276be701798d25ec91767","sha1":"67d6f5c6a65090927fe5143dbf6f92f6123e2924","sha256":"2bc6d1c977ab4af73256c49f1a8bb00cf566dba43825851666ac68f608c0bd25","sha512":"156a0089916390ebfc44b5681c9c35ddc19f575c0632264ba3e709f2a88b2b41cfccd8ca8d5e66bd11858cebdcc365bcc17c588577b9e316c83c024965ddf33f","ssdeep":"","tlshash":"c8c08cc4a0c22e001a02a82128af28e8a024806774881b228cd4d8592e620b08233ea8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.997265Z","last_seen":"2026-08-18T13:49:53.290351Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"98cb1f471a0de238da72628a4c39dea5","sha1":"de6c28f3b2e2ee6f1b47b45d014bff6a887bcd08","sha256":"b1e75cfc14734b3cb73043c2d0b3e1f10dd80af0775ef978ec39a0500f445f26","sha512":"5ea0135c7d00e74a33a6ee8ad3ea92eef10154456aade6904e59c1bafb3b755cf2e0c2d1c3efc83cae6dcf2db7354bb90ca930c1df504fa39eb03c381206c6a9","ssdeep":"","tlshash":"38c08cc5b0c26d40160aa49028ff35e89024442bb0881b428ce8e8983e220b08237e98","size":152,"data":"","first_seen":"2025-10-12T16:34:39.992257Z","last_seen":"2026-08-18T13:49:53.291262Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"99362d42c48c3ce8a91d0ef845a6d291","sha1":"7255a4d130d514351caf81f67fb4d9cc0d83c62b","sha256":"be94163fb61fb00bbe6983f50081c480207345b8954f9ee50fb2c1c2ae3e6073","sha512":"00d898d537893ec342ca42ae6de18ace2f732233bdcc9ebec86dadc655f76c242e445b9f21e0e764a91e23051842285042be74f3b088e36c08f664b359be5ff6","ssdeep":"","tlshash":"f4c08cc4a0cb7e145742691052bf29e4a0344027744cab038cd4d8482e274b4a23beec","size":154,"data":"","first_seen":"2025-10-12T16:34:39.92349Z","last_seen":"2026-08-18T13:49:53.292013Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/utils-20260611200355-BuUAUOok.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd2e8f5c83ad6e059fb2eee736be81ba","sha1":"6d0207b78c1e420f76fdeb1052adfda2ba5bbf46","sha256":"9c185990f13c48ae053a502c419702bdb67dd159c96a376d12d5b7e295cfdc12","sha512":"2a997beef197a54f6bd6c4372c85e47a67056d56c032fecfc12398e986aa6a68fa20a6a6a06cda6f08e54aeeccdccb12268e2dede7754693adda31585ba2d292","ssdeep":"1536:bYy5mdKFLdwSKyInh2BznkQ/2rtd9adWNMf1+t24UK/Aqs4vVzlDmUHhm5:953dYh2Bz/wHsdWNMOUK/jzle5","tlshash":"e5b391c835d2f04643a3b4e100bf048bf23e6e65a89da654e195e4ed7cb954ed237f28","size":114013,"data":"","first_seen":"2026-07-17T15:46:22.827237Z","last_seen":"2026-08-18T13:49:53.248111Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/index-DCNLuWe1.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"32c5129833c00f75ee24ae361c226048","sha1":"24ad6c23200aa6a7fcc521ac301066d5cff20f4d","sha256":"174dd9677a4324a95efb6434cd84ea71461ba783458e2eb41b2355e76c848812","sha512":"a0c26db3bfd8ec0b2f63efd7d4a8a6ef6e13383b9a71708b9a9958edbd4d4486781266c38c4f23b618c93a251dc9473fdd0494618267d7bff714351cf54431bb","ssdeep":"6144:MvDb06I5866PtzqBmE7MgDFZWFpHjfXx4+yI3YwQgQEWhroMBqEfBN:2HNw0tzSgzFpHNohgQEWhrgCN","tlshash":"2ff41742fc8599bdf7b76694404a0250734c2fcfd00888a5b6fe4d562b9acb8f76a734","size":744659,"data":"","first_seen":"2026-07-17T15:46:22.799514Z","last_seen":"2026-08-18T13:49:53.135873Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-19T18:11:49.232749Z","times_seen":8345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"ec9df9a33b666410337704bd726733b4","sha1":"d198df361486f669307a9f500430af5781ec29ca","sha256":"caca11cea1f1ff1eca68caaf85a0bb4b49f19bfcdc242251086ee515cc3bbc49","sha512":"e86f9ff2e723cba50481674e7514202d0198ac7629d8181b722cddb077afc2c5295c6d28dada4a9fd5d4886bf82ccda806c7aacb64740f31a8c643c411143342","ssdeep":"","tlshash":"a5c08cc4b0c23d006a02641410af38e4a0284027b04c1b129c94d8582e730b08237ee8","size":143,"data":"","first_seen":"2025-10-12T16:34:39.988929Z","last_seen":"2026-08-18T13:49:53.293972Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"6bf3d54da83101c2d0cd0d94a69d3c04","sha1":"d125f3ba021adeb05c5c7dfaf4fc7e74a0e7b3ee","sha256":"2a2418700efee08efa3470a8e6e387ed7f4769f63bb147a00d2ca287af1ea474","sha512":"6d32fa0a1baf76885888126915cbe4a60047748be8833907a4585c6248e25837cce5f38efd8ce543d95735a113922eb8e236f6fa50efde28ea544f9f85ae2fab","ssdeep":"","tlshash":"edc080cdb0d32e183e01692064af3cd4f1344467b14817528c94d85c2d330f54333e9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.962702Z","last_seen":"2026-08-18T13:49:53.295151Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"dc094b1b256d5c643caee7dbb2759bd0","sha1":"adf30061bd73776882c9b3c4307b9da89a77e448","sha256":"1924a94a5275e97ac50fd4b9ceb9cd137670a857a159826847a1bf70e4aee577","sha512":"7a645e4da9bc62cd103bc2b66fdb43d40826816fa26b64e459fa8889e42b5a9a1b67ef8218e9cb6cd999a1b9121cb41b3d8baedb76d9b45e861e40d72279ad1d","ssdeep":"","tlshash":"4dc08cc9f1e73e1026566a1514af68e8a0344836b0891b8f9de4ecc83e630f08237edd","size":162,"data":"","first_seen":"2025-10-12T16:34:39.965367Z","last_seen":"2026-08-18T13:49:53.295864Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"7d484391ae36f9672dd3a7e7d7be9763","sha1":"d53f53a7b8fd10a4966a66bf4850e275378a555e","sha256":"ceb3142d25d807ee8b06dfc21328ad2535124a2da646d83f8460e529f9ce6f47","sha512":"24b179dc9998205322e8c96e434a14e5e610c4faf8a4b78a3a415d067d26b327a94be7ac5f4dd2c2f52999d4693664b17625d2bf65655ad07665e3a8c1f4ed0a","ssdeep":"","tlshash":"6ac08cc4a0c32d402606641011bf34e49028842674481b429d94d8482e620b48233e9c","size":148,"data":"","first_seen":"2025-04-27T11:55:12.952615Z","last_seen":"2026-08-18T13:49:53.296578Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/charts-20260611200355-C9upGFI7.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"355e9a3af599e6ab5948bec3e12e904d","sha1":"44bf7e5f891959cfb8b04c876d8d643495bdc014","sha256":"b8737b4592e45f809d148104fc3deb5f49cd130f4fdff00b8442a45810c768e9","sha512":"e135e7c573e8bf04ca3adae20f2a57ce302546fdee437e4db6903f0fd8cb401c354479e6d6e6dbb615d5ef5f77174b77a4da613404aa26f7fcbe487cae1f8efb","ssdeep":"12288:RYi6X7ABBWbvHTZlS/Y+49+Pv3kG5CE2gnyC9MI4KVzbP:36A+DSA+yRDKnyC9M7KVzL","tlshash":"dc05e89cb614b03543a731b4156f090f933a580db54b85a8fb6ad4ea6cbd44b323bf78","size":813216,"data":"","first_seen":"2026-07-17T15:46:22.846064Z","last_seen":"2026-08-18T13:49:53.129622Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/vendor-20260611200355-BnAPnc1o.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc169ec9a03b25f5cc7815483486331b","sha1":"b9453067b2191216eb132d768d01ebfc0367b8eb","sha256":"293d757eb14d1abde06d4e0de11ea2f6ed68ad26e40caa44511abfa386f30bc0","sha512":"a03c58edacbbb3aeabbde9fdb30e8dac1e18d5dbcb150f9d9f5bd56b68f580215d5121e384e72b085555188859b3c032f3f569747770076c051858a865e1a058","ssdeep":"24576:XoWpImhvnsc7aBqaZFQO0ZcqhnEn5U1E6:XoWpImhZaBDFQO0ZcqhnE5U1E6","tlshash":"58353bb476927075079a60e5007b1903fe396d1b705fc0a4f269e8eb3cb8a4ad577b38","size":1136877,"data":"","first_seen":"2026-07-17T15:46:22.937095Z","last_seen":"2026-08-18T13:49:53.297842Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/en-20260611200355-CG8weHfT.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"a5b1d19f10399670ea1290326c183e9e","sha1":"deccf6c221217b0280af3b66a9a43ab0227b7257","sha256":"3aff16c883c5c7b9cbedb10411fa8aff0d3a369eb4b53aad76b44a347666919c","sha512":"881a5d7cf98dc0ff80e90370bd467da748ff62ff3c5ea74596f2b11e7d24de1c6e45bbd8a23d7b4c29bc2b56281166d4473cffb3235ef8f510302c1933746a8b","ssdeep":"768:uVtZcEw/oPr+OuiUAMqgUUg6zkPmvsYd8HnxJSu4/HTlA9JYQhQS0M:5poT+OKUUg6z1sYqHnxkMJwI","tlshash":"b543f78dba16599a04e3237a78ce7a6060f505c183588c1f4fec85fd43e2b7367a7729","size":57535,"data":"","first_seen":"2026-07-17T15:46:22.90261Z","last_seen":"2026-08-18T13:49:53.203111Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-18T13:58:29.393179Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"4acf87d00c4897d30dc5cb9aeadd7c45","sha1":"dcf23a6536e55481fa1bac3bd3fd146a91e65184","sha256":"56727def1b270126ba40c9ffb947309084fc4a22d6caafd6f785307e9614ad82","sha512":"842f100296530229b32e93ef969aabe0745435f435f79bc069fbf45f5fd47526d2d8e7d2ffb09957fefdfd831d27a0d1c5814ae7ff0e5177f8813ca941bfe17a","ssdeep":"","tlshash":"5dc012d9b1832d1016166410957fa4d8912844767188ab92ded8e8583d534b45137f9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.945429Z","last_seen":"2026-08-18T13:49:53.306634Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"47540997c6538c57830fb0ce972ce055","sha1":"8565f22fcbcff847c75545c1896ae84d4be4ea73","sha256":"0f80d63f8299c46291ef24637b760be2286a9f13587118e8c3af078cbba1d4a0","sha512":"5ca74a18fbfcd3273b667769d68236eb8eb2996fd1d8d84644584274ba0d6f5d43d6a1d2aabfc806c4e033c363d1493eb12d857d14eb3b4f40ceae3b793b4605","ssdeep":"","tlshash":"a5c08cc8e0d22d101a02b41424ff24e490a8442674481b069c94ec892e230b48233ea8","size":149,"data":"","first_seen":"2025-04-27T11:55:12.998082Z","last_seen":"2026-08-18T13:49:53.307833Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-08-18T13:49:53.308488Z","times_seen":904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-18T13:58:17.553417Z","times_seen":4471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/ui-vant-20260611200355-CEjTU8qP.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"800fc0acb481c7fb0129f6f1efcc8530","sha1":"0a208c9dfe519cf79e9fed3a87059afc0a15233d","sha256":"9df3233fbfd211f4ccb303b756c3307bc52cdfcb105bdad112725faea43fd68b","sha512":"67ec445e89dbeb2edd518e1ea0b4c1a8b6b187dd8993351f8b95ed0ecb1521d4b071f565a21b43e1245c76da30361d16bd36b7958034e59ddba645abd250cbb7","ssdeep":"3072:Oifz98JGD+/h+54T9cnHuEzJHwh32J1fYvuv6ntQjanuyFYwmAzKGz9:Oift+/h+MWMUAIeYwmFGz9","tlshash":"6eb34ad1b496b53897f798e5406a0110a62c1b88b019c5f4f07d6c873ba9dd4b2faf3c","size":116860,"data":"","first_seen":"2026-07-17T15:46:22.895694Z","last_seen":"2026-08-18T13:49:53.242947Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/framework-20260611200355-Cg7Rrw22.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63d97b6e96f926648503fd3d89b3389","sha1":"d16ce66c20fc438726e83e330039fb7b9dc35523","sha256":"4b826a4b1c82b7d12426a33021fa9682b069960ace17015fe5263645d6c12c2c","sha512":"20ea090e070ef5bfb2d8bcd8cddee2fbe5f380d0170c30ad451b4303f45013058c9b00dc31d8c9a3421a41c4f072ec530f45f2fea27f73b6ec58762599373dde","ssdeep":"768:r/rlGLJgfvRM9cKLdruRupyTbZlxWPD7u13SXp98FnNRqPO5xSyeHy5LVj1AbiTI:rovDGJ5ApqSX","tlshash":"65d2c5a93282b06547fb1995403f1505f2761a85348f88e0f26d98e33c3799e91afe7d","size":29035,"data":"","first_seen":"2026-07-17T15:46:22.89129Z","last_seen":"2026-08-18T13:49:53.238074Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/ac-chat.js?2.2.1781208239486","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-08-18T13:49:53.243641Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-19T04:49:37.644276Z","times_seen":4523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"4342c075064069a75b21b06ec6c9c3df","sha1":"6d219c2b352a6e62d76bdceffcbe70cfe0b9ef66","sha256":"51d786f481e0b83ee1dc319b53342d36b4b4f8fbeda9e872f89e25ab0e41a380","sha512":"cc78154423bd3125ca7754f934cde50e37e904ab59ed3aad3e349c5be9447a95a5dbc5c39eaf5d3c2b8df659c2b29555ef731de13df95c7e4351f0fe084ca604","ssdeep":"","tlshash":"f7e0c089f4c43b50ac052429766e38e89030001a6ae85b6ad9fc88887b110f84633ef8","size":353,"data":"","first_seen":"2025-10-12T16:34:39.979026Z","last_seen":"2026-08-18T13:49:53.311931Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/#/home","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"0381290b89e9198fc37d2e50b5f37797","sha1":"1508e92e22fcce03f5d3750ebdfa5abefe1b4e7e","sha256":"44841ff32b4f70eed44572ac672c77bd9cb91e417284049c17468f9e228122dd","sha512":"eb0e7d0c8ccca235d9f892dc29b843dc17ce5ab411959bd84620db36ca384f98e36acd31e3658904cf86c7c20d2fa0c7efcae2a1b2a68139d47df061f3f62003","ssdeep":"","tlshash":"38c022c6b1c63d804182711010bf24d090389122b0489b438cced8082b630b28137f98","size":192,"data":"","first_seen":"2025-10-12T16:34:39.937079Z","last_seen":"2026-08-18T13:49:53.312544Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.659Z","timestamp":1787060944659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqIzCzymPrZRhEPHlcbMdHKFwZ9DfuEQkgPYu0QdjREAJr25tY7m3MR4Zz4uGkFUc8lpSWl1%2BexPdazNWcAJd36hvQNEuKyLJhx0FmVdWte2Uew8gxFbwyLz0%2FMuqAM5iQf7601J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a2d161382c0c56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":157480,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-19T19:44:41.61072Z","times_seen":50637,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/ai.webp","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.677Z","timestamp":1787060944677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/ai.webp HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9016\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\netag: \"6a2b14a2-2338\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9016,"size_decoded":9455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ee434d763c325a57dc68dd5cd9342f9","sha1":"db594747347f4901f82ff0d9cb3ce71e95613f78","sha256":"40bd9102ca0e9c26e17694aa71ca21d20bf1f920a73ad03299e21f39eb59383c","sha512":"8a07454d75b9d85f457896ac8bbe209bb45fab6a45b8af5ca1731f443be0938a23f231c9491f76270d08a92e10e8ff453b5de08bbd3196d5c3c8645e5bee169b","ssdeep":"192:FwTdlXOaHnulmseQ++iVAr/wOr9fwO7+v3DeULFnXX0EXlTqKoh5b3:FwTXeaH4++i+X2n3qUJ0+lNoh5","tlshash":"20129e112be96767c912763dd1d05b9bde76fe0ccda8abaa4100895f09172d03d8c1df","first_seen":"2024-10-31T21:21:10.228315Z","last_seen":"2026-08-18T13:49:53.106716Z","times_seen":191,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/type/defi_activity_type","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.679Z","timestamp":1787060944679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":645,"size_decoded":895,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1d1ab82b7b0e24e87239220f0ee73845","sha1":"87539ae2bfa3815a8f5b02a48d235aa9ebaf2600","sha256":"efcb287dd83b6d26ad5b1aff1abae9bbfbd2adfe9e1ef0b05e12d367f731788a","sha512":"093649e3e8cf315f76898a1d544fee59d5179d1bf1a37e8d702f437a666c32f2e738f804f8b5b54435427f4744e3274fa0af32e7a14f57ee5b6bf0f23d465b7a","ssdeep":"","tlshash":"56f02854393dcebf099f25e745ecb8082d9d157b94e4fca45caa0f3c5ae4171098a108","first_seen":"2026-07-17T15:54:20.096923Z","last_seen":"2026-08-18T13:49:53.109076Z","times_seen":5,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.435Z","timestamp":1787060945435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.436Z","timestamp":1787060945436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getAllSetting","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.349Z","timestamp":1787060944349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":221,"send":0,"wait":222,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/7bca949f85804920b83881a061c4ee87.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.367Z","timestamp":1787060945367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/7bca949f85804920b83881a061c4ee87.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9YRwMATg_xgRyXOm0Dq3DGpL5qomZK6f0jzgld675xedxmYZMvMkfpH23kevIeP0XMw\r\nx-goog-generation: 1776239019631185\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 36799\r\nx-goog-hash: crc32c=a0p5Jw==, md5=+bE/a29hB694ol08Im2rWQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 36799\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:43:39 GMT\r\netag: \"f9b13f6b6f6107af78a25d3c226dab59\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":36799,"size_decoded":37525,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"f9b13f6b6f6107af78a25d3c226dab59","sha1":"691194d5fd843a6d4389228054b56984c65bd5fe","sha256":"3290e2a35cfdc40f3cb4e2d2b93714b4a23a134ad628d56249cd37acf7f4882e","sha512":"7375d3a90db06d9a48bafd29eace8bff907e3043077963672c9a00408cc041a8a4c58afb4ac88815e09c1252b5a2184e3a783fed0e086b8b1e727190733f51d2","ssdeep":"768:N/9KrWfWwOmpVnAIihbWrwJ4g+P1dgAOAMxYWnJG80M9MkXov0rUav:J9KUWwOmraqgwCAMxJZ0MSkoMZ","tlshash":"96f2f1ad6f9c10671672afbed6d442b6b257c1b4cb4181e4cab4b7805053bfd034369b","first_seen":"2024-08-19T19:43:08.129912Z","last_seen":"2026-08-18T13:49:53.111696Z","times_seen":57,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":31,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.396Z","timestamp":1787060945396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35536,"size_decoded":6839,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e458dcfdf1116d216881f3755ee24d03","sha1":"e2eeae9ee6f17f2fdd1ec4656260494187c978e4","sha256":"1aae84beb22bf198738387a922fc214eaa7c66ce089e0d36172edd99fb37763b","sha512":"8ebc0fa28f565bc211414bf615968ed8b20010d3f11a08b4692611d4d765ba0a363abc02d162aab58669651bd3ccc19a28ed530250dcb1e085fe6061def1373b","ssdeep":"384:A3UtKxTogIkDBVYNmlskO+gp4yAVUUS9CXYLluQ:AHF+kOOgUoms","tlshash":"b4f2b3724c46a15acd71ecab8bd7af932c113683c7dcdd43bd8b153ea9d4621a41a383","first_seen":"2026-08-18T13:49:53.116196Z","last_seen":"2026-08-18T13:49:53.116196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/92e3eca8bad743a08c3fb3c99c316c0c.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.359Z","timestamp":1787060945359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/92e3eca8bad743a08c3fb3c99c316c0c.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJjja9Zp-pFBzpiNSWPsGiXVG1vRnXNvQSi8c4c576pM0c1LMpDio426EdM3PbcjtWWBxdrwxrYUMZ0\r\nx-goog-generation: 1776238950036412\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 77463\r\nx-goog-hash: crc32c=QbgJZA==, md5=VPnXf80zVPOOt66jOJ1Hhw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 77463\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:42:30 GMT\r\netag: \"54f9d77fcd3354f38eb7aea3389d4787\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":77463,"size_decoded":78176,"mime_type":"image/png","magic":"PNG image data, 788 x 788, 8-bit/color RGBA, non-interlaced","md5":"54f9d77fcd3354f38eb7aea3389d4787","sha1":"62b721ecbcae9cba535f78aa2b3664a8eb86d60d","sha256":"b17cc532c9b4dec396d911e5d1e5d5a2e07155412c5f26e92db37530dfbedf65","sha512":"0091cda5d5b252b562f1282bcf3fb5265c575660a255c22dc8674d87a92f1a501857598489fb48e5162cb71e9a81854066887e51c8bbad0fed9ed2d16a92f5d0","ssdeep":"1536:vFpdSmv+gx+M5LptW+2aEs6jUojPE554k2fiN3gUeSgqftNb6BBvJQWS:pzvJ+2Lpt8NsUzjM5L2fiNwaT6BM","tlshash":"d07302422cf2fa2a15d530b969f917da320a543c475673894720afdfb808d250fef9e5","first_seen":"2026-04-22T17:43:19.592649Z","last_seen":"2026-08-18T13:49:53.118698Z","times_seen":5,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":15,"receive":15,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/81f1e70a64c647c08151a7fc8c2770e2.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.369Z","timestamp":1787060945369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/81f1e70a64c647c08151a7fc8c2770e2.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9ZABHu6weN6Bolpf26s-iZ2g-TdpaW3VGguI8cpqBgRZy4F_tAwWExTHbDz3qQUD02l\r\nx-goog-generation: 1776239071508376\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 25011\r\nx-goog-hash: crc32c=R/LAew==, md5=UT84xlnmrOxx6FZpcZbong==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 25011\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:44:31 GMT\r\netag: \"513f38c659e6acec71e856697196e89e\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":25011,"size_decoded":25737,"mime_type":"image/png","magic":"PNG image data, 456 x 456, 8-bit/color RGBA, non-interlaced","md5":"513f38c659e6acec71e856697196e89e","sha1":"33733430668b6e515db400d34db44d95bd679190","sha256":"fc3b2552b3d32edd94a3df71cc53f6e71d81ad501cd832e58096670dd7e9aa65","sha512":"8d27dfc9c75ee5aacbc48ea4e70a1b6171f3cc38faa9c163771abf077586887d700a5b7855d95b21d9e537e978e1adf40bb9ec55aadb594ffdee9217c1a27179","ssdeep":"384:AOee+FqIs8H6Z2o0YUS1X/t1A5u65B89N21HzBjfdlYHgxEOVXnHdHZq+sG1PIjJ:AThFqEaj0ZS1Fi5zokH/qglXn95q+9u","tlshash":"f1b2e117ba750b7bb4656f8703b0c0aa4014ae72936b9eecc63564ad43b23f139137a0","first_seen":"2026-07-28T18:17:04.024935Z","last_seen":"2026-08-18T13:49:53.120692Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.441Z","timestamp":1787060945441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/platform/XTB/favicon.ico?2.2.1781208239486","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:06.350Z","timestamp":1787060946350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /platform/XTB/favicon.ico?2.2.1781208239486 HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\netag: \"6a2b14a2-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4727,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"736ab303eb59978e732401993249a93b","sha1":"0fe50612359128f305d31d581c418f3db2b6126b","sha256":"92df3b8da79b67dcab175866a7208e3d287cb59232d992275ff566ea0b701c8e","sha512":"0d453556ed22d1510ef0762728be25e9dd60c6c8a9290c277bba6c613c4e214a9f3b15d4f289918fbf218f4a943d5ca32bdea0a0b4cefa2d74b2d3bde9556d57","ssdeep":"24:sufOfrGQ4LDf0Ub+MRvu07ia2P8YXq0IhTk9eb:si5Hf/bD7iaBkeu","tlshash":"db91c7c17204a064d0d6727cd3552ac90b5f5f896364f1a4003e393f3333a9a0cfea99","first_seen":"2026-07-17T15:46:22.794922Z","last_seen":"2026-08-18T13:49:53.123682Z","times_seen":6,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/banner/2.jpg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.666Z","timestamp":1787060944666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/banner/2.jpg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-aa94\"\r\nexpires: Thu, 17 Sep 2026 13:49:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43668,"size_decoded":42723,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 714x402, components 3","md5":"7996cfdbd822e42a42baa16b55823830","sha1":"da84afed9c33084f1fcc3f8d5fa57635fa412714","sha256":"566499cf32f14db0781d6d03db60157f4451893bf725785caed7ea97a93a9ec4","sha512":"022da8912deebaa8e02ca3475f2c16badadd8d9928d7cc8a80e77ca284b1e624300502130a05b8ff0b46150f491c5b853b971135d62b0dbd7232da58b5f345c5","ssdeep":"768:WMp/NRV4ix8eZzApdPmM3dtZyfLCw4pFTECrjyl5wgorgVK22fOdTbA:7/beix8r3Pm0+4pFZfyl5yd22fOdg","tlshash":"6d13f1a23139d342c5731f76d1451a5e2ad3a12b43d01f68afac8f8a7bb120ad57d6c4","first_seen":"2026-07-17T15:46:22.874381Z","last_seen":"2026-08-18T13:49:53.124588Z","times_seen":6,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.446Z","timestamp":1787060945446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.415Z","timestamp":1787060945415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209,"size_decoded":799,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ea52632349770c872ddddeb645ab4d3c","sha1":"91ca51f26bf6b4268bc2b34a69313445c055bf50","sha256":"6428cadde65fe0a30f3dee3d9184f6b98ee163ee4230dad3565d678b8705c2b1","sha512":"4efdafc0b163dbaa1747e97f0a9e1863dc18882fa265c324f9ce08630ca973e84abc04367ff0f19b308d97bf086519e72a29d541ef992d2b10ea5706c4b4be06","ssdeep":"","tlshash":"c6d022682ec0c8d210ab42cf8b83538196f8102c0a042f0c7aec852a91d8a7f3043a80","first_seen":"2026-08-18T13:49:53.125777Z","last_seen":"2026-08-18T13:49:53.125777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T13:49:01.537Z","timestamp":1787060941537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-1d3b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7483,"size_decoded":2972,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1132)","md5":"9f0214dc71fb411a8bf433fa7f81aff9","sha1":"579ce6baf0e4783c7a6b587a2263c40a94eb4dda","sha256":"939e6aacaeee99a40c676dc63cc212bf0e8930c8ea8ce888c3d8522faa58c429","sha512":"9748bf46e2f782d3b965e61b0d006ce8b19d120657e4c435c837c4f009692f9e0814628ebaa198cad0931ba7673b64152387a86012ca15915aad785584318f79","ssdeep":"192:TFKrIgUu3AmZCxfi2nftZbtuB1XitiQfo:Ykk3DZCxq2iSoQA","tlshash":"f2f153a3a9f0dc1a23550729eae7f014aea09257821e9c74b4de04ed4fc1fd1c8e3a75","first_seen":"2026-07-17T15:46:22.835535Z","last_seen":"2026-08-18T13:49:53.127688Z","times_seen":6,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":0,"dns":42,"connect":214,"send":0,"wait":215,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/charts-20260611200355-C9upGFI7.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.582Z","timestamp":1787060942582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/charts-20260611200355-C9upGFI7.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-c68a0\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":813216,"size_decoded":265656,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64916), with no line terminators","md5":"355e9a3af599e6ab5948bec3e12e904d","sha1":"44bf7e5f891959cfb8b04c876d8d643495bdc014","sha256":"b8737b4592e45f809d148104fc3deb5f49cd130f4fdff00b8442a45810c768e9","sha512":"e135e7c573e8bf04ca3adae20f2a57ce302546fdee437e4db6903f0fd8cb401c354479e6d6e6dbb615d5ef5f77174b77a4da613404aa26f7fcbe487cae1f8efb","ssdeep":"12288:RYi6X7ABBWbvHTZlS/Y+49+Pv3kG5CE2gnyC9MI4KVzbP:36A+DSA+yRDKnyC9M7KVzL","tlshash":"dc05e89cb614b03543a731b4156f090f933a580db54b85a8fb6ad4ea6cbd44b323bf78","first_seen":"2026-07-17T15:46:22.846064Z","last_seen":"2026-08-18T13:49:53.129622Z","times_seen":6,"resource_available":true,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getCustomerService","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.296Z","timestamp":1787060945296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/common/getCustomerService HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/6382b11fbb4840f4af70435e29cb4f6e.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.375Z","timestamp":1787060945375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/6382b11fbb4840f4af70435e29cb4f6e.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9b0SG0iMWvypROKtw0XnykTeb4eWYwTnufbxm_sL6BauaJ4CyPFKNrbTtZ13tuGqYIvRQKnrcc\r\nx-goog-generation: 1776239109196014\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 14108\r\nx-goog-hash: crc32c=ch7zcA==, md5=E4ZY6Oa5UNuBJjoVHi5mbg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 14108\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:45:09 GMT\r\netag: \"138658e8e6b950db81263a151e2e666e\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":14108,"size_decoded":14841,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"138658e8e6b950db81263a151e2e666e","sha1":"4047c893d4f200e63f23ba1f44ef0f4b7472194f","sha256":"b22b99eeb066d26a1c59fbed985cebe689073ad5318a2edd72ea0c59e80dd8e1","sha512":"af4c49e4a77d90b7270831c2c573ca35179ce8d11929a902674383fba77e43f1f83846dd0bd15fca5e905ac162e4fc4f052b2fd72a88a67497d0855bc0fde407","ssdeep":"384:BOGXfBzlLQpQsBDwY8A2Tz8SmmSoBTeAcnWYsWx+mn5CvFgYh:8G7s20DwdPTzTBT8nWQ+mn5CvF1","tlshash":"0b52cfecf4916056139d759afc3ed09a9d82872b95148a0a058263edf9cb5c1ffcca18","first_seen":"2026-07-28T18:17:04.03013Z","last_seen":"2026-08-18T13:49:53.131166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/52470e6c88f84b0090d6f2b4994670b4.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.380Z","timestamp":1787060945380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/52470e6c88f84b0090d6f2b4994670b4.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9bkVprrSTrFt58pNrsceuoMI_EJte-egru4Z1bH2OjNXfJ6dQ92EoS6L9NKB1JjOQQr\r\nx-goog-generation: 1777917061942841\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 62943\r\nx-goog-hash: crc32c=liHpGQ==, md5=ONPCFEF+dKFMxeD3exKiZg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 62943\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 04 May 2026 17:51:02 GMT\r\netag: \"38d3c214417e74a14cc5e0f77b12a266\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":62943,"size_decoded":63669,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"38d3c214417e74a14cc5e0f77b12a266","sha1":"ddaf469a148cc5384f4c21143d3c806b8f15d608","sha256":"f7bf9a6765b840144fbc92bb3b6ab651d01dbda50e43f5b1189026c61fb235da","sha512":"25b86988159279d75ba7a19333eb2205e7152bcd80dda08a5459445cbfa0dcab5f6da1245d537819237cfb022851443fc7d3f1be0bb51d1edab374a1fa571e2b","ssdeep":"1536:DniY3DeEl3embDMv5QlP/H8EpmcVM+PrXHT:Dni2Kaupv5ElM+PbHT","tlshash":"1f530200ce89f9631c96d13622e8d64c5819a1c89f21ab7bcc21add33ecafd52535b7d","first_seen":"2026-07-28T18:17:04.030972Z","last_seen":"2026-08-18T13:49:53.1319Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":53,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.418Z","timestamp":1787060945418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpjpy\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":798,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f003eac51d054fb430e6187deefaed2","sha1":"18c8b1e24f5cf46caf529d05a0afcf60c12f80cf","sha256":"a23011e18be388ff68ca342f04d7f68f3a92218ae70fbe98047811580ac5c7a8","sha512":"cc6ce3fa1fae2dc00b94ed171f406f6d9f8f319b3bd8b8baa471daa86cbd16f1e0c75a1064e96429474776fc36bd6b90487c0eaa0ec3adf5f8bba5512fab9309","ssdeep":"","tlshash":"7bd0236e95a48553281fc2db81d22701c3f410751300471c6d6cc22f526d13d11175c0","first_seen":"2026-08-18T13:49:53.133107Z","last_seen":"2026-08-18T13:49:53.133107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/18c6e3d33d4a4c8d9734f0a6c68cc282.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.383Z","timestamp":1787060945383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/18c6e3d33d4a4c8d9734f0a6c68cc282.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9bif7YdZP1yF51fSJFVVUe-ytftfUOXGQw-D5h05Yz5-kenwUZ04XSOFnPGlPe1pgum\r\nx-goog-generation: 1777917203427668\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 80332\r\nx-goog-hash: crc32c=uLCoBA==, md5=4XVwO3tG2vst9tO/XZF9CA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 80332\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 04 May 2026 17:53:23 GMT\r\netag: \"e175703b7b46dafb2df6d3bf5d917d08\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":80332,"size_decoded":81058,"mime_type":"image/png","magic":"PNG image data, 510 x 510, 8-bit/color RGBA, non-interlaced","md5":"e175703b7b46dafb2df6d3bf5d917d08","sha1":"945d500428519682683356710e68fffa83af780d","sha256":"afd0c28d25cabdfea18b5e9923b6961c71252735ae3af835709a3a1139df15eb","sha512":"681c991a9ebe1de4e12413e9fd527713422e12700529416730f6a553d2d7b3d0d6849f648a6ccce55ccfef7b88cf2d9c61e045cb088954c74b27a9a17aa8bf3b","ssdeep":"1536:9FFaQYWIhJ8GBkIeWjjZW+5OFcHimNJjKkSKHJXmgiujmDO7X1pX:HFaQYWIhJ94pAOFcHiGntmWv7X1t","tlshash":"c2730245f1d0c1e8d947a05b650a1fa080b85970d37da1fe277ea5deb7e92f5b72b000","first_seen":"2026-07-28T18:17:04.069596Z","last_seen":"2026-08-18T13:49:53.13456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":49,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.424Z","timestamp":1787060945424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/af8d12a7bf9b45389b450dde6c90aff3.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.374Z","timestamp":1787060945374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/af8d12a7bf9b45389b450dde6c90aff3.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9anIhrYr3QVo6uY_t_X-YIP4tgvA7aZ5XfGuatP2DbXwwSM3_VGK6nj3O8WRtGkvp4\r\nx-goog-generation: 1776239087241679\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 10938\r\nx-goog-hash: crc32c=5fbWIg==, md5=Zf0Tr3ayyBmh1hwyDITjEA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 10938\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:44:47 GMT\r\netag: \"65fd13af76b2c819a1d61c320c84e310\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":10938,"size_decoded":11663,"mime_type":"image/png","magic":"PNG image data, 222 x 222, 8-bit/color RGBA, non-interlaced","md5":"65fd13af76b2c819a1d61c320c84e310","sha1":"be9e7e0f23c21a10e301167ea18546a35701b0ac","sha256":"1c4937330bf172868fe9dbb592802e765aba069f4243f557166bd415e18e5e3c","sha512":"d9122f8361d18d9b06243af8317053e5c5cc8cd22f244d6a0dea114e5ae84cc26adea7c1f847efff4c20c4b2bb93019401e43ba686a8568161e052d045d3d845","ssdeep":"192:bLivIARS9naQmd8wAY7DW4P6pY8HeyH/zbCJEiJGt1bDhSI7rrTQtXVv7oALlg:yv9RSNaQ9R4yveyHb2JEiUboI7rr0tXQ","tlshash":"5432c01a8193faa8d09eff74567c4e0f86708d288e7083962e24b6e0c05401eef17df9","first_seen":"2026-04-22T17:43:19.6344Z","last_seen":"2026-08-18T13:49:53.135162Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/index-DCNLuWe1.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.573Z","timestamp":1787060942573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/index-DCNLuWe1.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-b5cd3\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":744659,"size_decoded":213909,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63909)","md5":"32c5129833c00f75ee24ae361c226048","sha1":"24ad6c23200aa6a7fcc521ac301066d5cff20f4d","sha256":"174dd9677a4324a95efb6434cd84ea71461ba783458e2eb41b2355e76c848812","sha512":"a0c26db3bfd8ec0b2f63efd7d4a8a6ef6e13383b9a71708b9a9958edbd4d4486781266c38c4f23b618c93a251dc9473fdd0494618267d7bff714351cf54431bb","ssdeep":"6144:MvDb06I5866PtzqBmE7MgDFZWFpHjfXx4+yI3YwQgQEWhroMBqEfBN:2HNw0tzSgzFpHNohgQEWhrgCN","tlshash":"2ff41742fc8599bdf7b76694404a0250734c2fcfd00888a5b6fe4d562b9acb8f76a734","first_seen":"2026-07-17T15:46:22.799514Z","last_seen":"2026-08-18T13:49:53.135873Z","times_seen":6,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/vendor-20260611200355-BaVkx4tQ.css","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.585Z","timestamp":1787060942585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/vendor-20260611200355-BaVkx4tQ.css HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-11eef\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73455,"size_decoded":6103,"mime_type":"text/css","magic":"ASCII text, with very long lines (65353)","md5":"b58107efd258752756eb13c3cb8e1f4d","sha1":"d1bcf46e3101d4ddff77070824c560007d3af2c0","sha256":"2d4c25b06c681d0ba8cef2c4bc42a9ed6a2646af4b35baa63e3cf8f9a4de966a","sha512":"e92eb3901e5bd238d5094fefb8aa42deb51ca9e9c89f22fa41f7c16e06eb6100d52f297629f3a9ce46a67f0c2db89c9f9fac485411ec1df3852f84279a1cbc18","ssdeep":"1536:v6uNQ3fdPwwanleMf72yMzkZUPhw71ZACkFDS3vyf58rBeV05Ta:4kZ8w71ZACkFDS3vyf58rBeV05Ta","tlshash":"e97338ae4891128991274f6287cd4ea84a3dc6b315621cde33552c4b8f87fee33de617","first_seen":"2023-11-12T16:46:43Z","last_seen":"2026-08-18T13:49:53.136899Z","times_seen":269,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.395Z","timestamp":1787060945395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37896,"size_decoded":9659,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3a713b8fef53f495e99b793476b3d230","sha1":"62b10f720fbe978713a122e6d542af1646229582","sha256":"a88df3f1dee48198fc326424a5cfaf0b2d627170f1f1788c7a9cde22ba572658","sha512":"0f321b1b29b106456f0c208f6263d12e75b23ecb6ef9cd4b4816056d8fd38faabe8e649d7c34a28636db31d6dbe76abeac1b76d6778aeea0c7d3658e4c2fc713","ssdeep":"384:N56EeWz1ulpOyRoOHB1T/8cvPxPjRkmQDAljS71OL5Ei/6FXqE6eN+yUq0vnSV1D:NMea780mF965q0v+NOmj44up5qSLfpG","tlshash":"02036f7478c8c06dd978eed68bd7beff140673c347ed9d414a8ea412a9d0a30d919b82","first_seen":"2026-08-18T13:49:53.139587Z","last_seen":"2026-08-18T13:49:53.139587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/charting_library/charting_library.min.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.569Z","timestamp":1787060942569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a1-2a6a\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10858,"size_decoded":3702,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-19T20:09:07.785956Z","times_seen":1370,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getCoinList","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.349Z","timestamp":1787060944349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":219,"send":0,"wait":227,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.427Z","timestamp":1787060945427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/web3-20260611200355-BLSvnMTs.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.584Z","timestamp":1787060942584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/web3-20260611200355-BLSvnMTs.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-f61\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3937,"size_decoded":2140,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3937), with no line terminators","md5":"ca14fef652f448032fb3a65639eb3968","sha1":"b516b3c00008bdb68ac3fd9739455ae0216c71f2","sha256":"8826eba2de7441f5cd9e4b52a57cd29646dc3f1315eacb5d66199321abc92c24","sha512":"cd67c1fcb412c9728f5d82d037f8c8cc3cb548b8ce47ea0a5ec971ab54e06e819c22f012b7e2bcf283ad63fb9775f79b1eaff69a5e182b552da4895ab8ffea8d","ssdeep":"","tlshash":"f781a499f6a0b0b00d4bc5e0e1ff2126607123ac762b895064a7899725fa84fc57f66b","first_seen":"2026-07-17T15:46:22.916169Z","last_seen":"2026-08-18T13:49:53.145682Z","times_seen":6,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":896,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getCoinList","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.344Z","timestamp":1787060944344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24791,"size_decoded":4210,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (24775), with no line terminators","md5":"855ac9689d48598d9f30b79f702986e2","sha1":"acd7c7cf621525631c4b452cc2e6b3fae65651ef","sha256":"b07371e6662ca31e8379a1637c6d61225c15cf32f5dd8c682d36064830eb0f3e","sha512":"56ba49e8224d3f53fcbc58d331cb9867c670470b69783eaaf0ea545a93cc09b40f965eb85b0ff9c1e3fa5abd7eab8fa106731a9b36296a753133fc1a885ae21f","ssdeep":"768:2yZxQ1AWnX6mc1Pk48WVCHjYS1oBPhI3oTMl4mQHjUKuPez+AagIlVAYA/e8HyI:2Qq+WXVaFNkD71ePhI3oTMl4mQHjUKua","tlshash":"52b29555252c49bdc569c1d12eaf3e12528c357ffcce8e2b92da8dc8c9e4a70560af07","first_seen":"2026-08-18T13:49:53.147488Z","last_seen":"2026-08-18T13:49:53.147488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/cooperative2.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.686Z","timestamp":1787060944686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/cooperative2.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-66cc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26316,"size_decoded":18543,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08074ea43880adbf9fbfad6a2d55a9e8","sha1":"2f4ab87f2c0b5ebe3dfc5e35f18e68e829eef4cb","sha256":"15925b5ec9e0a2eede574536f72ad65ddd1a233305ebcd86ffebac23c4c6bfc7","sha512":"ed8aa7f50977a8ca59449bfe1a021e91c3fcd2c2a7978a0db475494f6b632fdacc72d47a1115ca077ce0c56fb02b470130199f38a94346d16bb2982f857c4ca5","ssdeep":"768:Jfs921W6+Jr1TroqmOGuxCdvPtvMW7MOKKiqmCOJWSvrD:Jk9217+x1Trof9uxaJx7MOlxmQSvn","tlshash":"34c2bf38f1090ccfd7c5621e7731ea685e87a06bd75c9102ea48f58672aacc25d6d0df","first_seen":"2024-10-31T21:21:10.392907Z","last_seen":"2026-08-18T13:49:53.151554Z","times_seen":111,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api.info-wss.top/ws/2b468931-4712-456c-98cc-d2f88be43794","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.330Z","timestamp":1787060945330,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"GET /ws/2b468931-4712-456c-98cc-d2f88be43794 HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://exxtb.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 63DkdKSykq28zSq3OYvc2A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 18 Aug 2026 13:49:05 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://exxtb.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: wsGaRxOjDw4d3dGYwbupWSS6QCw=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":439,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":0,"dns":0,"connect":222,"send":0,"wait":228,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/fonts/DINOT-Regular.ttf","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.450Z","timestamp":1787060945450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exxtb.com/assets/index-20260611200356-4IPj_2_6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\netag: \"6a2b14a2-b6ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46828,"size_decoded":47282,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-18T13:49:53.153533Z","times_seen":349,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/4511c40898a841f58f9c45036a8f667e.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.376Z","timestamp":1787060945376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/4511c40898a841f58f9c45036a8f667e.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9ZYkyUFdR2g3FzNrn7iT5x4R-7LuEvseQcH11tdKigva4puAra1byjw4bi2iwlyqU01\r\nx-goog-generation: 1776238903979040\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9626\r\nx-goog-hash: crc32c=N61Fxg==, md5=IJuznoqqxV9hTq7iai/IeQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9626\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:41:44 GMT\r\netag: \"209bb39e8aaac55f614eaee26a2fc879\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":9626,"size_decoded":10350,"mime_type":"image/png","magic":"PNG image data, 222 x 222, 8-bit/color RGBA, non-interlaced","md5":"209bb39e8aaac55f614eaee26a2fc879","sha1":"ac537d0d489b6048ee4db6f8d4483b2b5dd30244","sha256":"d09c45518a821a8868e09f382f8251efa9aef3abfd1f340526145870a50c076a","sha512":"0c1445e99e0c10e12cdc7a0ddd8437cd047f1dd7c24b9b7679fb9c18eb6847ba1459d62eaa9a609363ec68896b16778d29954112119852b7a53b194533eb3eea","ssdeep":"192:bskqd6Cz7sVuLqVGHRctfbSoii1F/lxpY1MPrHxMEMqTiL8vbWM9ymP:ARXsVuLqkHRKWvin9x3TEmiLI","tlshash":"e312aebb682bc3d85da91558c25af0a2b4ca22177794da00384f313ab8f89744586276","first_seen":"2026-07-28T18:17:03.9959Z","last_seen":"2026-08-18T13:49:53.154426Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/app/market/forexGoldSession","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.388Z","timestamp":1787060945388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"GET /api/app/market/forexGoldSession HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156,"size_decoded":757,"mime_type":"application/json","magic":"JSON text data","md5":"16c20a56b8415390fbfb30bda5e635e6","sha1":"e0666311bf47f1e038840eb849f9f7f487be2cff","sha256":"1578431b0c4d24987b908f8de5e2f20302a9fec32182b0b33a70d880f1373dee","sha512":"7a025ac77c40775298da28653a44d6b367246238266b1fa191a493fe465c98d1ad7a3ef9d4e564b664215e1d318123e44676f8fc871c6b3490162540095cda35","ssdeep":"","tlshash":"57c08ce80c489132e0ea21e204aaaa25882933e0e5686e0e1eefea4908ec065221cc05","first_seen":"2026-08-18T13:49:53.157942Z","last_seen":"2026-08-18T13:49:53.157942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.414Z","timestamp":1787060945414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210,"size_decoded":797,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f88559b8d64f945b945da7bb5f198282","sha1":"6605622209491654dfb828203f04003647de254c","sha256":"13c48c5941787806a6dac604001cdc4134f0fd973154f03753a90f7f021e574f","sha512":"ef5059d41c781f3894a8599e8d8423ec7f571fc05b4b550bec8293a6039639f22b759ad50caf00e80630af2046ebf0bb98573762cc3d040f80e5a4b0ad805f44","ssdeep":"","tlshash":"ccd022d42a8080c220ab42cba303072881acb062020d2b08aa9c82d871eebfea817190","first_seen":"2026-08-18T13:49:53.161782Z","last_seen":"2026-08-18T13:49:53.161782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.433Z","timestamp":1787060945433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.444Z","timestamp":1787060945444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/index-20260611200356-4IPj_2_6.css","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.588Z","timestamp":1787060942588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/index-20260611200356-4IPj_2_6.css HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-81b06\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531206,"size_decoded":76652,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"45c7ea42cc5d8677c4b3324bd797c5be","sha1":"2e187cc010fb55664cfebcacb3f4f2e36f5d048c","sha256":"15269abe90d72b17bda67c4995dd6549b1637d77242eaeff84c96ddf4c1203d1","sha512":"9cd184e4261a434ac73de3ae9a08d53285bdba3d91e9712b4f5b49a292ec4e81f87b09150e2fd4fe63f021b20d0838bd11ee3fd3ab9e76c0ddd6f7c980c6ed6b","ssdeep":"12288:/rtAqmIjo0gO4AbJA+4QhPWbj8WTxxrAU:/rtAqmIjo0gO4AbJA+4QhPRWTx2U","tlshash":"55b4d738f68c2139b837cad97d90aa8cd018be62e0431ed4f65365664dcf3db2a31759","first_seen":"2026-07-17T15:46:22.809623Z","last_seen":"2026-08-18T13:49:53.164035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/enK_.gif","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.674Z","timestamp":1787060944674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/enK_.gif HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-53921\"\r\nexpires: Thu, 17 Sep 2026 13:49:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342305,"size_decoded":308316,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-08-18T13:49:53.16757Z","times_seen":203,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/ai4.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.684Z","timestamp":1787060944684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/ai4.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-fde\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4062,"size_decoded":2070,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f36289a67c02534f334b7a7ba82586a","sha1":"ea680334caae72af8027d42c36702e6bb6929f64","sha256":"0b143b746b8b6034e6dcb73cc78fe60cf59e42a9cba1a6cf605045a9c2e5bbde","sha512":"82bb649678fcb6313c60455f6cd283a1ae047d0f8ba4a0508cff06081b2c231702ddc603c823ebd3ce17eb4cd12b8df28d346c8a04faccddf905b79979f61aa3","ssdeep":"","tlshash":"8d81b62ab3b9e976f104e7b8d6059830355a48bbb5814250c3f5af2f91241cd1b3f8eb","first_seen":"2024-12-07T19:52:26.441151Z","last_seen":"2026-08-18T13:49:53.169675Z","times_seen":150,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/4f9b7849ebcc4f479edf69423114e3eb.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.362Z","timestamp":1787060945362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/4f9b7849ebcc4f479edf69423114e3eb.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJjja9ZxOLyQqt4xT3RIEK69i4BXPW1zfaKifVllGRPyUQAUrE6q3k--qaFmvtZTdRzK2Klb\r\nx-goog-generation: 1776238961653109\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 37897\r\nx-goog-hash: crc32c=W+rmrw==, md5=X2c3xUbRhJhr1DTvdLkWaQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 37897\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:42:41 GMT\r\netag: \"5f6737c546d184986bd434ef74b91669\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":37897,"size_decoded":38603,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGBA, non-interlaced","md5":"5f6737c546d184986bd434ef74b91669","sha1":"7398205eec685a602c8eb748193efc6e486dd4ea","sha256":"24e62bbdec7d88e2a6908517b2d16cca3fc54c4521c617c001a6fee4cb5debae","sha512":"d0214f76d4c28c9d72ecb28a370f269410cc91d3d3cc271db1106ca854a9f3fc097183e3a13e2a49de67793556c148322e27f5d97c333243aa473d9409cde1ca","ssdeep":"768:K4cTcVp2+UANPJsziG+pc2l9Po31tn/pJkBEz3clNhpR:K3Tciz2PJsziGpE+jQKbcDR","tlshash":"3503f1d8778741f5ab27b6bb94012b5e29a43fd0df0a39c2ad1080607043b78d5a7ce9","first_seen":"2026-04-22T17:43:19.317308Z","last_seen":"2026-08-18T13:49:53.172308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":20,"receive":6,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/ui-vant-20260611200355-DprUuZFp.css","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.587Z","timestamp":1787060942587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/ui-vant-20260611200355-DprUuZFp.css HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-390e8\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233704,"size_decoded":80143,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2eb95ed885142b0dd82fecc6eab19801","sha1":"0e84437ae761d00e00141ca75f90e53ea548e2cd","sha256":"a1c388fdf1a871d3bad70011fb2bf740a1c70427a85e7529560c40aecf033ccd","sha512":"d76ecf99d2feec8ca053d340e31c636f3959b6170ca36dc225bd6b5e5e776e51a00955cb33a9c62799910d90518e37541b3b8717959db052f5264652dee2bd3b","ssdeep":"1536:+CwsBlDOFIxuVoxHtIyNBi3MFYaQj7FCwsBlDOFIxuVoxie4/BiFVAVzWqIG1AhU:+ClDsIxuVSHnNIClDsIxuVSUHutU","tlshash":"8434d795e69091bcaf2bf175ab8b56dcf23cf570ed01daa4f10091580ec7bf50623a1a","first_seen":"2026-07-17T15:46:22.909164Z","last_seen":"2026-08-18T13:49:53.181733Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1007,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getMt5Amount?coin=XAU","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.385Z","timestamp":1787060945385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=XAU HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":686,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"20b91f8a538f191da3d520f567c11c7c","sha1":"eba95c3a310b8d1a9b962625e0a9bfe272b3c49a","sha256":"003a76f707c0a3be1a3fa3e70ed292c4e3b754194481e738eeeb658a07253ba0","sha512":"b72006aa2508ef68a591aaf7b81da39ec38c78b48ca6cc1b4ff0d6f6755598e9d855232dd3ed28951366dc11659b62cdb494fc5ce154f466d6bb867c232a20a9","ssdeep":"","tlshash":"229002552c188242a88311a59506630414353164262892494d599b2584881622040898","first_seen":"2026-08-18T13:49:53.183888Z","last_seen":"2026-08-18T13:49:53.183888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.393Z","timestamp":1787060945393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40476,"size_decoded":11238,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"70f9e95f2de787c42f60e650958ec719","sha1":"4ece6fe46bd1f9a04b56519dba195eec9f655c6c","sha256":"e2a234fbe16b52fde8c92288995dad94d0ff75817f268f4f7c3ffa63f833ec22","sha512":"42981622e710cb258a4a6a19f89cfcfc86f15ccfb15fbb3fee5bfcfbeb2eee5281ee344a5c386462f776a8e0d1c39f4d7f175cf012bdc2416e8b6c8db465e275","ssdeep":"768:Zo5DWkFPp32P+aEO57qLcfOGF7co8HcBou:oWothaEO57qLcGM7cpSP","tlshash":"04039e3499988e7cc835acd27f93fcb0061233d346eead5176cb5952bad0e2ce516782","first_seen":"2026-08-18T13:49:53.187755Z","last_seen":"2026-08-18T13:49:53.187755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.399Z","timestamp":1787060945399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38859,"size_decoded":7392,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d844cf900c6ca72854909ed4448869f5","sha1":"f98440519e5910998f48a2dce2aa023fbf8b9ace","sha256":"d3ac2c1d7f2a2021c1688c3aa6f2923bf67ca87d61b71f7a3924b738e9ed9324","sha512":"a4931b1b5d3dbb1581b4160a94d7463c38dc369c98fa7fc1a935cef23734729494d9d3d5f5e704530c88f47b2f5c1cd61c7bfc938605611e3e0d76710e4d2903","ssdeep":"768:zn6FA3x1CWKrtWKrMrO7zPf43cYlhcYlp6vzieIE4AiNhE2i:76FAyWKrtWKrMrO7zPf43cYlhcYlp6vH","tlshash":"8f036478498a8358e9315c8a1ff3bef050127ad70eddddd2428d1d4dea94324b3b53aa","first_seen":"2026-08-18T13:49:53.191442Z","last_seen":"2026-08-18T13:49:53.191442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getMt5Amount?coin=XAG","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.401Z","timestamp":1787060945401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=XAG HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/app/market/forexGoldSession","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.405Z","timestamp":1787060945405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/app/market/forexGoldSession HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":661,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.443Z","timestamp":1787060945443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/platform/XTB/config.js?1787060944326","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.330Z","timestamp":1787060944330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /platform/XTB/config.js?1787060944326 HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-19T19:28:40.807728Z","times_seen":552272,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/ai3.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.683Z","timestamp":1787060944683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/ai3.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-1baf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7087,"size_decoded":2871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53e7b1117a8526f6eb229df446cc722","sha1":"bd13b10b3d466c27cf406fae1a07adb3650dfd9e","sha256":"05d9270b980c401bbc75d3374fc10b459f661b3f5420d168daa5369d8fc8c48c","sha512":"0e693efa9349078257f94a89a7acb5f3d892ceba824440516c2c8fb88b71e937923ba1bd10b020d9cf2e80985fbd5f0ddefbf9176e6ad341a17caf9dfc7da856","ssdeep":"96:UN24KuLu7W0X/YIRcOMlit6YO+0hR8Kob/RfZcPRDg4rQA2EOAl6NkNLW4nW/1do:skuLu7CLOMlit6tvhRLlY5o","tlshash":"17e1652ab3aed97af148d3fcdb008435716640e3a951d261c2e5be1f982509d683e9c3","first_seen":"2024-11-30T14:01:13.939903Z","last_seen":"2026-08-18T13:49:53.196634Z","times_seen":150,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/cooperative.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.685Z","timestamp":1787060944685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/cooperative.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-ea19\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59929,"size_decoded":44652,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"374f2e54f8fb75e19a350416f112b5df","sha1":"5bd4ed4e41f6e710e3180a447c2b0220fa977479","sha256":"dac0005cf2feb36b1062315bd8e714aa13492f209a0353c33127ab21fa2c9d2a","sha512":"dad24c69289b017b7e44a58e8c092a9322e20f3fe2fab5f13a5dd877d404298bf7d969e40d69b3c6bfcdc094dbba7398ef2f75ef919921829b2390c5f44cf4e5","ssdeep":"1536:EisgEPqW8QQ+ewtSHfARDTUUCz32y1HkNtJSJMa7AuGs:5Yx8QQbr04DVlkUPrGs","tlshash":"274302f0fa1d68ec8578453c969fd69fade6349b9b8c39099c04f940b84bd8458348df","first_seen":"2024-10-31T21:21:10.372706Z","last_seen":"2026-08-18T13:49:53.198064Z","times_seen":108,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.420Z","timestamp":1787060945420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audusd\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":799,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"63e7fb225dd824624121a393b79201ce","sha1":"a8f55d922430e457dbef6c072cacdc3c701a9268","sha256":"f1f3fde952be45eb34d30a64fdf62f4a0fad6ce3542414614090dd39112f86ac","sha512":"0f5c578899dada9711fb454d8bc825a293235a3b434299ef6bf38053b5abc0e7a3e12b54c9a83093674e46e7e68a25e7fe48e83b80cf01b749b0d5681c93550f","ssdeep":"","tlshash":"16d022e68da4487310ce03cf80d3030882e820dc2220131caedcd99892ceb7e7227088","first_seen":"2026-08-18T13:49:53.199649Z","last_seen":"2026-08-18T13:49:53.199649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/vendor-20260611200355-BnAPnc1o.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.574Z","timestamp":1787060942574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/vendor-20260611200355-BnAPnc1o.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-1158ed\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1136877,"size_decoded":348858,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c8312c262ed70913cbb6083a536b4e6d","sha1":"1874b9bff7270b4f70f98ec5bbdbec679b0cc105","sha256":"db61e3d48d501b2e4379c62c715b4ebdde5a632d155351f99c19be694f8b2d48","sha512":"7043a067e629bf5ec33414cb3930b10088929fffff0882989dee1975b627147d0cfdc1d69523e1073065fdf09343b3e6b47ead2e87bfb644f3f2eb3c1468066b","ssdeep":"12288:XoW2iImhvnsclVY+PXqBqa3KzomZ2G5bO0ZcqhnE195B0Jtt12:XoWpImhvnsc7aBqaZFQO0ZcqhnEn5U12","tlshash":"af253cb4769270a507aa60d5407b1903ff396e1b305fc0a4f269d8eb3c78a49d5b7b38","first_seen":"2026-07-17T15:46:22.838908Z","last_seen":"2026-08-18T13:49:53.202087Z","times_seen":6,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/en-20260611200355-CG8weHfT.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.340Z","timestamp":1787060944340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/en-20260611200355-CG8weHfT.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-e0c1\"\r\nexpires: Wed, 19 Aug 2026 01:49:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57537,"size_decoded":18669,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (57509), with no line terminators","md5":"a5b1d19f10399670ea1290326c183e9e","sha1":"deccf6c221217b0280af3b66a9a43ab0227b7257","sha256":"3aff16c883c5c7b9cbedb10411fa8aff0d3a369eb4b53aad76b44a347666919c","sha512":"881a5d7cf98dc0ff80e90370bd467da748ff62ff3c5ea74596f2b11e7d24de1c6e45bbd8a23d7b4c29bc2b56281166d4473cffb3235ef8f510302c1933746a8b","ssdeep":"768:uVtZcEw/oPr+OuiUAMqgUUg6zkPmvsYd8HnxJSu4/HTlA9JYQhQS0M:5poT+OKUUg6z1sYqHnxkMJwI","tlshash":"b543f78dba16599a04e3237a78ce7a6060f505c183588c1f4fec85fd43e2b7367a7729","first_seen":"2026-07-17T15:46:22.90261Z","last_seen":"2026-08-18T13:49:53.203111Z","times_seen":6,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getMt5Amount?coin=XAG","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.386Z","timestamp":1787060945386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=XAG HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":686,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"654224e538f500cab76d8ccac78297b5","sha1":"df6730026922edad6f9b1dd695959ac970ea4a0a","sha256":"17f3dd4aeb5ebe1294eb50cdf524b532b66b609b3bcbd241317c2091061a1954","sha512":"44a0802691146307746f5d8bf0554d64e7fb3d4485e85be25fc3b3031ea336913398e4eb4ff3f19ba0652fe40537088a2ae0778310488c146297c21f9cd15277","ssdeep":"","tlshash":"009002591c18c243a89300b595061204102535642624a3998c5a5625848c56f2040858","first_seen":"2026-08-18T13:49:53.204148Z","last_seen":"2026-08-18T13:49:53.204148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.398Z","timestamp":1787060945398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36449,"size_decoded":8945,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bb7cad276840c16f04a0b18839dbd330","sha1":"64dcfbf593fb9742e67f6b9b5b973a2a26c7cbfd","sha256":"ebfee2bb2b6022a237e6d1b9de2157954a0257788af1b64a4db99b69e069c629","sha512":"89afc9f64fbbd3db4879482f541cb64281ddfe1ca1804f5df4ff955cf99f5e0be622195590416c162010449cad35ca5cf01753b616f36f45d7e2cde1908cf369","ssdeep":"768:DF/wPGQn75wACGc757tgv1kn14uId/izzAAdo5dM17Ozf8GJ0CAN0YbY7kyBh9eA:5Qn75wACGc757tgv1a14uIdazzAAdo5h","tlshash":"2df285348c8cd0f9e5b46cd64ba3bcd7762633e746fd4c41429866129af2ef3a510b92","first_seen":"2026-08-18T13:49:53.208208Z","last_seen":"2026-08-18T13:49:53.208208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/banner/1.jpg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.665Z","timestamp":1787060944665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/banner/1.jpg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-7c80\"\r\nexpires: Thu, 17 Sep 2026 13:49:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31872,"size_decoded":32132,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 714x400, components 3","md5":"acf4e7d4f7599aa6c8d45e545b73f212","sha1":"687a9a05f29171dbd1be1d760b28e308fa2b90a7","sha256":"ddebf7c9aab88c5b55606b55bdb074ad7c6bc4dc89d408e5c32f4a67958e95e9","sha512":"e1e4bc170bfc50e9dbc1e47e280c9301f918abe366291aa360e4529c7497c3ee8eb8485004675939265c2df54339879b10a92bc7224518487b038f1b6d770025","ssdeep":"768:zqAlV7uh40Y/QikxVFHYEt0OZzDAHhcYnk4IQJMZzDIlkLiJB3HwPgt:WAlVuh40YU5/WOZzicb4IQQLiJBZt","tlshash":"89e2e105bfe51f18d7893bfa0003d7a6fac17472c41a3f0607aa7b181ab9374557b2a8","first_seen":"2026-07-17T15:46:22.81958Z","last_seen":"2026-08-18T13:49:53.211669Z","times_seen":6,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/128fa6904568442eba161198a3694ba9.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.372Z","timestamp":1787060945372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/128fa6904568442eba161198a3694ba9.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9YLW5TkGuup3cmBviFxhkaqoxTdf02pIDom3DTTQel6Jpa-xUfK6LwzQ9i_9itXwxmCqchyxVg\r\nx-goog-generation: 1776239165623155\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 10367\r\nx-goog-hash: crc32c=9Ncf1A==, md5=ugaRp/9ko+Oz+XQOAZKvlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 10367\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:46:05 GMT\r\netag: \"ba0691a7ff64a3e3b3f9740e0192af96\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":10367,"size_decoded":11100,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ba0691a7ff64a3e3b3f9740e0192af96","sha1":"80757326b2a22b3cd19451608395a99e2827399c","sha256":"f3d84b4995369c37d775ebb7d9fc03aea40d76ad38291ae4dafaff3cf1e5cbd5","sha512":"ed0eed11e64ebf7ec8ea90150e1b5262162d0fcc6e89e87c6ad4760e5d4e4862b7ee44009b97a0203224068bde6e83f3f33e6e2977ed7deda1554952bf460ea8","ssdeep":"192:fUh4sruPk38818XJqh5Fa2F0Htfm9nmLqA0JL0oNO+dwn0W4:fUh4sruc3VgJqhna2yFKnmLMV04wn0N","tlshash":"5c22c0a6fc59566de1abc77630daf8f15ee0cb00c6ba3d872ed570cb5b1c8805000788","first_seen":"2026-04-22T17:43:19.375868Z","last_seen":"2026-08-18T13:49:53.217Z","times_seen":5,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/6cdddb4757ae405ca76d88fce901bdf8.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.382Z","timestamp":1787060945382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/6cdddb4757ae405ca76d88fce901bdf8.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9YoHVZQU55OhyC5RhcwnILXilkgPCZRSkRasLII3zmo5uvKt4fM2g8hXp5Vgfo-6q5I\r\nx-goog-generation: 1777917165058601\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 72788\r\nx-goog-hash: crc32c=458NeA==, md5=UDeSzFweiDxACAGcvaIfsQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 72788\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 04 May 2026 17:52:45 GMT\r\netag: \"503792cc5c1e883c4008019cbda21fb1\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":72788,"size_decoded":73514,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"503792cc5c1e883c4008019cbda21fb1","sha1":"cf5d01898592698bd140945e12c7cd6a5f4816e6","sha256":"f48065a9c61e17fcdb63794cc644425f6747d1c9557765e5cfabea72f24f15b6","sha512":"cfecb5dd97de0fd0f0a99c0efd5df27df609777f1ced9c8c908cb6277e296f3daf325978ccc2d36da0f87e6ae6093b4bdf121e13f1845e4bf2ea44133c34b3aa","ssdeep":"1536:jESeWpnA2cii2+p4gJZAG7oXwBOpSeugM0PuqHftgB2Un:jESZR7cx2+FJToABFE5Hfq","tlshash":"bb63029bb0bd70f39e3394b2ece05315d2978b7c2f14e453026de94c752568a86a6f83","first_seen":"2026-07-28T18:17:04.000276Z","last_seen":"2026-08-18T13:49:53.218196Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":53,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/logo3.png","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.664Z","timestamp":1787060944664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/logo3.png HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-73e7\"\r\nexpires: Thu, 17 Sep 2026 13:49:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29671,"size_decoded":30148,"mime_type":"image/png","magic":"PNG image data, 600 x 228, 8-bit/color RGBA, non-interlaced","md5":"8c46ee157d623988f5255fa49acd6362","sha1":"77ce234272e1bc7864ffb1fb62a5ef8b6c282644","sha256":"5e128f1d8e135ec6a7cb89985c5be9d2723b56e67f3a87450e7326d21f0fa2ce","sha512":"0c08248ad9f353ad0a6d18b3bcaad117816af870541e356286a48fff3e6b07dad9b4418a8039e3f8d805f5364e1a904f8c28cd9b87e8f6d4f1f6cf4f818450cd","ssdeep":"384:la75N9n02f9vOFTx+GZFuJBBze3lL//8gbHDxe/JeNbj5AnbdReadNgMMtLeb94T:qP5OFTlZFuo3FH5Anb+ao1Sb3O2s","tlshash":"efd2e197f8b8e52a7961f2f77bfb1e31dc038022d6721c04965141cb67c1e7906295ae","first_seen":"2026-07-17T15:46:22.792773Z","last_seen":"2026-08-18T13:49:53.21949Z","times_seen":6,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/83a2e77fc39b4ae087c4e3110e974eb8.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.355Z","timestamp":1787060945355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/83a2e77fc39b4ae087c4e3110e974eb8.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9ZBJvnpLRhLOPm_ybm07Dda9JzZzeDp1Mj0hjUcCUDkRxKwZG2KTqp4cR_t3yu2bNrHxIM5ftg\r\nx-goog-generation: 1776238876852007\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 10919\r\nx-goog-hash: crc32c=qjxdwg==, md5=cGGOryHbm0z5Mz/oe55ksw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 10919\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:41:16 GMT\r\netag: \"70618eaf21db9b4cf9333fe87b9e64b3\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":10919,"size_decoded":11652,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"70618eaf21db9b4cf9333fe87b9e64b3","sha1":"f30f17ccc4b35b116be1c0b625b38ed1cc460e25","sha256":"2840bdc3fc797fa04e6292ad5b241ed65b90cffb4815abe0ecb129878b226123","sha512":"f52fa397853316814bb261165dd9d58e607047ff3077f66020c537de568638265bac02d56c4913f7aa163f6ec2d4d1b4fae72a240ffa0339d6ecb93302bb9c55","ssdeep":"192:sUj5n3zhY7jW4JCasVc1Km9U5uG5q/kxaaGy5g98esbdpjmBY+Z9xh2T:sg3KnW4vsJLH5PsyisLmS+Z9HE","tlshash":"cd32bff38525f414815a9a28bd0f69043f810ee07a85935e728afe25f54f6883d9ccf8","first_seen":"2026-04-22T17:43:19.351651Z","last_seen":"2026-08-18T13:49:53.221059Z","times_seen":5,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":13,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/cfb1aed3e8514e429a894168affefd6a.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.356Z","timestamp":1787060945356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/cfb1aed3e8514e429a894168affefd6a.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJjja9a_SXjVaA20IsfVrhcFYGPk5z-vj1PCEV4o3jWfYTAb877y3GpX_ayy85qMAqcB30jGWeNseYU\r\nx-goog-generation: 1776238891808067\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 71196\r\nx-goog-hash: crc32c=GgJFSA==, md5=ndYEgXzAv1zZEy7c6+QFcA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 71196\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:41:31 GMT\r\netag: \"9dd604817cc0bf5cd9132edcebe40570\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":71196,"size_decoded":71909,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"9dd604817cc0bf5cd9132edcebe40570","sha1":"e0462ae91ad6c89c3a1b6ef05c14ed6beb477985","sha256":"1031196f8e84fdfe159d29d8202e712ae8977d333d958006d3d466a1cb002f10","sha512":"88025e2b1389e96e2582e19dc5cb6f640876a6fea47547a69a06c8294ee0ffe7533a3ca9a4880ce7f1be1db7c9bb398b27c98e42350115169dbd1a4c04164e73","ssdeep":"1536:qN8xTDNGER9bxassWkICVZxbPp9vNc6VUBECFcFvKuGqK2:qmxnNGwlxsDICVZxbXvNNqBESkH","tlshash":"35630295bd55a876fbf64f89868eb042645c744cfd0a2107eb9e07a6347303bc29cb4e","first_seen":"2025-08-03T20:40:07.004543Z","last_seen":"2026-08-18T13:49:53.222255Z","times_seen":16,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":17,"receive":12,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.403Z","timestamp":1787060945403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38356,"size_decoded":7078,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7572b3d38eb79a07bb637e55f113d54c","sha1":"b7787ab5632ab6f1cbe900bfbff17f4ba86812bf","sha256":"567463562f6f2e4a1d7eb8f3ad1e2daa2e50b96f01e165b1d15a6e81e6f07e0f","sha512":"fc224d3ec4352c1f28d2cdfd72be9e44e9e1c47a3a16ac8e892f9c1eefbe97589b5b014e93f43164cab48d6bbecfa514b7941fcbdd75578199ffbbf62ea8ed23","ssdeep":"384:QL7Gvhw3Ya2ZG0I/y9StDEKvy4ibJ1Q5yZOfiGjzg6MJrEfow3m:QPGmy9nQ5mOfBMnJrT","tlshash":"090366348e448259d97decca4f87edf5251a39d36edc4ce0b2cd5c40aea8e6490d23b6","first_seen":"2026-08-18T13:49:53.223192Z","last_seen":"2026-08-18T13:49:53.223192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/fonts/Arial.ttf","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.657Z","timestamp":1787060944657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exxtb.com/assets/index-20260611200356-4IPj_2_6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\netag: \"6a2b14a2-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":1047469,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-08-19T20:09:07.793305Z","times_seen":2247,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/more.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.668Z","timestamp":1787060944668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/more.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-59b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1435,"size_decoded":932,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63810c29f19cf606d16c0cf5fee50f39","sha1":"a78c6ae3bd094c40b29dba1ee1047ae74c6120d6","sha256":"f1d750f4e0385db35c7d1ab9f46537cd61986e2a58c72a49e21cdace58985ab6","sha512":"e07799ea4b257e23d17317e94bbcc7cd5c9b3c2f5893d3fbaa1e267811aa9b5e02ad2b26d224db1ba85af04d6dd5ff71fb9ce8b753bed248253271ab1513e356","ssdeep":"","tlshash":"a2218eae03c87058c116c7afe87e12f4fa6128ff5b504b5ab57c97341f46a4e8499cc2","first_seen":"2025-04-10T04:12:55.936161Z","last_seen":"2026-08-18T13:49:53.236003Z","times_seen":121,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.419Z","timestamp":1787060945419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audjpy\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":800,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"be4dfd717b525d188a4d89e59653f04d","sha1":"6a9f9fcacc493e6484eef8f7042d39348525ca41","sha256":"302632b9a5e9191c337e38d09af644dc7c1188d632b41c79ba77096aac8beff8","sha512":"b685f630ee6b4b4d99c8d88e94235bca33d2eb208696b013bea85ed35b9c437bca1effe92f1d92f8821886e9c76aa86a237500cb10459f616b36c2ea4f788118","ssdeep":"","tlshash":"d4d0223f9a9188e22c8b56cf40410708d7e8101e52c96f08bebe8365718c27e6a83680","first_seen":"2026-08-18T13:49:53.23667Z","last_seen":"2026-08-18T13:49:53.23667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.442Z","timestamp":1787060945442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.448Z","timestamp":1787060945448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/framework-20260611200355-Cg7Rrw22.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.580Z","timestamp":1787060942580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/framework-20260611200355-Cg7Rrw22.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-716b\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29035,"size_decoded":11631,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29035), with no line terminators","md5":"c63d97b6e96f926648503fd3d89b3389","sha1":"d16ce66c20fc438726e83e330039fb7b9dc35523","sha256":"4b826a4b1c82b7d12426a33021fa9682b069960ace17015fe5263645d6c12c2c","sha512":"20ea090e070ef5bfb2d8bcd8cddee2fbe5f380d0170c30ad451b4303f45013058c9b00dc31d8c9a3421a41c4f072ec530f45f2fea27f73b6ec58762599373dde","ssdeep":"768:r/rlGLJgfvRM9cKLdruRupyTbZlxWPD7u13SXp98FnNRqPO5xSyeHy5LVj1AbiTI:rovDGJ5ApqSX","tlshash":"65d2c5a93282b06547fb1995403f1505f2761a85348f88e0f26d98e33c3799e91afe7d","first_seen":"2026-07-17T15:46:22.89129Z","last_seen":"2026-08-18T13:49:53.238074Z","times_seen":6,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":899,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.404Z","timestamp":1787060945404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40604,"size_decoded":8270,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"44afeabb5975971272c7c1f0ce31139a","sha1":"90dc9a496334fa413aa2636fcd5f4f215f469a43","sha256":"0e6dfa3986fa2ff4b18c0a0eaeadc843932794c10c5a469e4fbfff51743ea72a","sha512":"2dc9481f41f2c9b6edda1f49aa26b734dac01483da4b0cc05cb8d533b5237d55003d52dfd36474c00e0c45bf236b32c183890c262b04e1f9717c503d0af07386","ssdeep":"768:TDbBWtiluoYYeAO+zGbzGUSzGlO22gKpbdVVbmUvVbyyZcYUjxEbzrUOMiUezQEm:aLGhNV52FaTelzzUA","tlshash":"f9030fbac955c218c5716fcf6f87bee0055139c76aed8df142899c4cab9c3a092703b6","first_seen":"2026-08-18T13:49:53.24058Z","last_seen":"2026-08-18T13:49:53.24058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.426Z","timestamp":1787060945426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.437Z","timestamp":1787060945437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.438Z","timestamp":1787060945438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.444Z","timestamp":1787060945444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.447Z","timestamp":1787060945447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getMt5Amount?coin=XAU","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.400Z","timestamp":1787060945400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=XAU HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.408Z","timestamp":1787060945408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lrc\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40148,"size_decoded":8629,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2b2d86fd6be29bfb60db792223bdc040","sha1":"7dc51098d804d8afacb0ef2add690175d53f0912","sha256":"fcd0db4664d2ebc80692c70ca6406c04845ef2e183770e2ab2cd580a8e35fb2a","sha512":"be7c40e682d950097898f2d1d04cba8bc87e3f296046aad75dcf2c6ec4c06eb48ecfd3f50540b09d749ab8b65393ce072e7bd58f4a33c0133c5bdc5636e386b5","ssdeep":"192:hQUIRkp180Jg+OuiMUNJCNCEY8NfKWU3U6IqJZ6oReZySVovhGtJHy3eAXi+vpin:WvaS3BIqqy7hD3kLIy7","tlshash":"bb036b744f8a925ad533bdfe2fb7bef4414239c35add5cc601ad6c086a40270a3987a7","first_seen":"2026-07-17T15:46:22.806913Z","last_seen":"2026-08-18T13:49:53.242093Z","times_seen":6,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/ui-vant-20260611200355-CEjTU8qP.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.576Z","timestamp":1787060942576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/ui-vant-20260611200355-CEjTU8qP.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-1c87c\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116860,"size_decoded":41166,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65244), with no line terminators","md5":"800fc0acb481c7fb0129f6f1efcc8530","sha1":"0a208c9dfe519cf79e9fed3a87059afc0a15233d","sha256":"9df3233fbfd211f4ccb303b756c3307bc52cdfcb105bdad112725faea43fd68b","sha512":"67ec445e89dbeb2edd518e1ea0b4c1a8b6b187dd8993351f8b95ed0ecb1521d4b071f565a21b43e1245c76da30361d16bd36b7958034e59ddba645abd250cbb7","ssdeep":"3072:Oifz98JGD+/h+54T9cnHuEzJHwh32J1fYvuv6ntQjanuyFYwmAzKGz9:Oift+/h+MWMUAIeYwmFGz9","tlshash":"6eb34ad1b496b53897f798e5406a0110a62c1b88b019c5f4f07d6c873ba9dd4b2faf3c","first_seen":"2026-07-17T15:46:22.895694Z","last_seen":"2026-08-18T13:49:53.242947Z","times_seen":6,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/ac-chat.js?2.2.1781208239486","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.589Z","timestamp":1787060942589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /ac-chat.js?2.2.1781208239486 HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a1-907\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2311,"size_decoded":1384,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-08-18T13:49:53.243641Z","times_seen":146,"resource_available":true,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/ai2.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.682Z","timestamp":1787060944682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/ai2.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-8462\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33890,"size_decoded":25918,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b527cb50c44f791e4c1bdb582c296","sha1":"b9d5e0c2a1aad9aa06872c84bd6c1ed50328bca1","sha256":"be31898c9ef6b0f26bbd66f381e89c250d44dcd5e7fe879ac913c3cbd9fe5bd4","sha512":"3c9087d90c856f7440339fa714c342e2583abe629991c6da2e1a8722b8ebb81e41f1fab72f693c069f7eed9566efb88061b35ae3da59b0d44bf5389471f46a6f","ssdeep":"768:b+F76xoi6BmlUAOAzlshwrePeuvj3ubsaKkmZD:b8PRAzlshwqP/3ubsa3kD","tlshash":"95e2f1aeef52980be9560ff9823761f113fb0bb604970c26967067c394d83b8355b49d","first_seen":"2024-10-31T21:21:10.414612Z","last_seen":"2026-08-18T13:49:53.244193Z","times_seen":176,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/841046514e6b44c5977ef72d129a050e.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.373Z","timestamp":1787060945373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/841046514e6b44c5977ef72d129a050e.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9ZOndaoimUTDSxc_I8lQS5XqClY2s4tx593RS0Cip3c3c7qDGh6c462S3-bTzhMovw_\r\nx-goog-generation: 1776239227683751\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 84742\r\nx-goog-hash: crc32c=FJ+MHA==, md5=pqPcCZDabPivKzt1HwHJbg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 84742\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:47:07 GMT\r\netag: \"a6a3dc0990da6cf8af2b3b751f01c96e\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":84742,"size_decoded":85468,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"a6a3dc0990da6cf8af2b3b751f01c96e","sha1":"303a9c9cb7d2543436d5e48e897f1858d2a10cc0","sha256":"8c1a6343e6e579e9381d2e0e68e65075a69b39fe6211251b91f78352fef4c4df","sha512":"5c8eea4a325b99939bd1ec7ad27e2ff4793cb541df41d2a5ab52a8ac13f847e8467b2b6ef5d55abd6cca5d6a7b339f44aa39ea7ad1857d0e5ca3c7ed929068e1","ssdeep":"1536:UDr0HFmBD8pggsdCl0DOICFFXSWq83PAvB3I9eSHwIqyfVMcYC:UOrpRsdU01PZvB49/qYjl","tlshash":"ab83020db1cd2ffced1305e46a2c750493524a96de01ab538536daefeeadc809f1c919","first_seen":"2026-04-22T17:43:19.304619Z","last_seen":"2026-08-18T13:49:53.244795Z","times_seen":4,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":22,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/8a4fe51e7ff44f7a8958ad3cd6308834.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.377Z","timestamp":1787060945377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/8a4fe51e7ff44f7a8958ad3cd6308834.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9b-OIWHAfGKJAC75_QPssifFZSCdUGdB16TO4cw5bDWA58NoHfYgLWOwek8vdD3Aa_lRnnRi7M\r\nx-goog-generation: 1776238930516167\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 19713\r\nx-goog-hash: crc32c=/lkoQw==, md5=7uDuSmR/LKw76zYNQ7Ddqg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 19713\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:42:10 GMT\r\netag: \"eee0ee4a647f2cac3beb360d43b0ddaa\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":19713,"size_decoded":20446,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced","md5":"eee0ee4a647f2cac3beb360d43b0ddaa","sha1":"0598d5f6735c1e912a55ee47e6496c597c93094f","sha256":"84d36c793ea8dcd42e0ce48b0456cd8ef1d71baa4b8f76e803977b125363136f","sha512":"84dfb0545b18059bea069e6200015581b4c3e7aa2ebf9a5fdb0e7333a8a38fdba2e0397462fa776fbdf26090dc4c32b3d9308a3d29dcdea0b248f6245c7ac9aa","ssdeep":"384:obi0X1sFNOSPPoC1Lj3gpgYZH4jeHu2gtZpeLIusvkykqPjCq5:qmHZNj3glxgfpeLIus+qP2q5","tlshash":"c292e152d656fdf13ede73e87485079224b66b71cb9c0aa2b3a6f00da5083d09063ad4","first_seen":"2026-07-28T18:17:04.068599Z","last_seen":"2026-08-18T13:49:53.245332Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.409Z","timestamp":1787060945409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"link\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35955,"size_decoded":9115,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4e39a3f415d0429eb14b851a69964b6f","sha1":"4d4f7b7c187703015a69cacfcc0efea5fc7cc6cc","sha256":"c6847233e4f43deb53590bad76662f392e7bba8db09ec8cca294ce9e3fe77c82","sha512":"fd100c39194e73026f7e25094a6f1229a2e406d20999f08f819033ef63e6302427a9f00bbb81419a746ef3815f3551ec43eb6e96d1badb2bad2bb8191fee297a","ssdeep":"768:4K0ITfv591jovtIKOh4d1+ESa6hPp0RYlUXU8tOOX/8yW+b:4DITX6OSd1+ta67QV","tlshash":"a5f25333cd8888e9cc706cf25fb3aee0c9a136e74eed0e815a4957856dd0365f161b92","first_seen":"2026-08-18T13:49:53.2459Z","last_seen":"2026-08-18T13:49:53.2459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/notice/getAllNoticeList","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.689Z","timestamp":1787060944689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/type/defi_activity_type","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.690Z","timestamp":1787060944690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getCustomerService","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.294Z","timestamp":1787060945294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/common/getCustomerService HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353,"size_decoded":894,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e5cb81643c385f6ff52687088a870e59","sha1":"64b755c22640721d248d1f49c4a646a4ce11b694","sha256":"eaa2ffed944620ca7a18610722f8644c8a208db34c3b0cff49d6ee4954fd63bd","sha512":"d204fb6d09ad61c2f8aad42c0ab1fd4bffd5afb6a828b6c457d344a8b504b3866752b68611e5b4d1ea77a97990f8966bffcf8946d778fdb0e63907e871c80ca0","ssdeep":"","tlshash":"22e0c077598caa7a07ce2fc111c7348dd2d22017ac9ee9e9f7156c9cd11105202cb8dd","first_seen":"2026-07-17T15:46:22.913993Z","last_seen":"2026-08-18T13:49:53.246935Z","times_seen":6,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.428Z","timestamp":1787060945428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.571Z","timestamp":1787060942571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1z%2FtZXjNBsQRSoA3XVA9bvGNq1GjutQdJjNtMQORb0As%2FUaRjXtH7zCcIEmgdulX%2FdUH6g%2FjbM6Rx8ntc4oUmGlqTOWlYeaNnX%2F91e60ikthWbXJL73mvoD1RCmXUUkKhLuQCKD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a2d1612b287a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":19856,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-19T19:19:58.515404Z","times_seen":34968,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/utils-20260611200355-BuUAUOok.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.578Z","timestamp":1787060942578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/utils-20260611200355-BuUAUOok.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-1bd5d\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114013,"size_decoded":42568,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators","md5":"dd2e8f5c83ad6e059fb2eee736be81ba","sha1":"6d0207b78c1e420f76fdeb1052adfda2ba5bbf46","sha256":"9c185990f13c48ae053a502c419702bdb67dd159c96a376d12d5b7e295cfdc12","sha512":"2a997beef197a54f6bd6c4372c85e47a67056d56c032fecfc12398e986aa6a68fa20a6a6a06cda6f08e54aeeccdccb12268e2dede7754693adda31585ba2d292","ssdeep":"1536:bYy5mdKFLdwSKyInh2BznkQ/2rtd9adWNMf1+t24UK/Aqs4vVzlDmUHhm5:953dYh2Bz/wHsdWNMOUK/jzle5","tlshash":"e5b391c835d2f04643a3b4e100bf048bf23e6e65a89da654e195e4ed7cb954ed237f28","first_seen":"2026-07-17T15:46:22.827237Z","last_seen":"2026-08-18T13:49:53.248111Z","times_seen":6,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/1a478c8d8ac94555963df610feb4c95a.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.365Z","timestamp":1787060945365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/1a478c8d8ac94555963df610feb4c95a.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9bEg0gf9FnPLKnj354ZZRsATIr2MU3Nv7kTobwYgDjLjxzZCMA3l5R11bQ3tDdMaK059Tlgh9A\r\nx-goog-generation: 1776239009706757\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3745\r\nx-goog-hash: crc32c=DWM3Cg==, md5=/NZyy0/QUnuOXeyXZrQAXQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3745\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:43:29 GMT\r\netag: \"fcd672cb4fd0527b8e5dec9766b4005d\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3745,"size_decoded":4476,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 4-bit colormap, non-interlaced","md5":"fcd672cb4fd0527b8e5dec9766b4005d","sha1":"1e8d18a81593f1cbd583cc250adbbe3b0355e4d7","sha256":"59d79495f5ae4e5a5b65259040bab9a09a39526940573be102488b74d99b7d9b","sha512":"5c0492c6f07765910363c805be38fc6a8991cc8a416bb583c5f968fa1ac92264e9593bc07799ade594d37f6ed0911293ae6519b7b2ef37099ac4d086e3fdc7dc","ssdeep":"","tlshash":"04714aceaa3076ea5827362504e11858bf957b1abb04876fe783d827d104d383954bda","first_seen":"2026-07-28T18:17:04.055534Z","last_seen":"2026-08-18T13:49:53.248698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/a685ea6425104307b2d1928adfd2d639.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.381Z","timestamp":1787060945381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/a685ea6425104307b2d1928adfd2d639.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9bQYKXHDz6nQSJkP-xJAJMe4RodHecs94FnDwQUgfka7lLWfu44MYCztV2rHYd6JvAL\r\nx-goog-generation: 1777917140592561\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 59140\r\nx-goog-hash: crc32c=1ErTqg==, md5=vU34no2SsifSIw755/DkaA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 59140\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 04 May 2026 17:52:20 GMT\r\netag: \"bd4df89e8d92b227d2230ef9e7f0e468\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":59140,"size_decoded":59866,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"bd4df89e8d92b227d2230ef9e7f0e468","sha1":"2b1000f1c8edfc6340f5a763018dfa6b2e3630bb","sha256":"d6356652d06f757bb5afb08311e52d9600ff1040052b8e24dca84a0fe5abcdd2","sha512":"f86b7a3533f0072aa3e12f2d1265fe718692ca4a80b3f2f433337b7d129d87f705249ec1ce92e888ac23c8e1daec574db27cd4964e23b6f3cea658f4a3fcb1f0","ssdeep":"1536:312AT/4lEB+EjNVc//7jTuPxTuPhcmk+kCCN:3j/4lEBPE//yPxaq+kCM","tlshash":"874301e7ace3cf8ea3572d593bf911fc8b4181645517dd18c9b6aba838a4f49040f352","first_seen":"2026-07-28T18:17:04.010696Z","last_seen":"2026-08-18T13:49:53.249379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.445Z","timestamp":1787060945445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.413Z","timestamp":1787060945413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"dgb\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39833,"size_decoded":6896,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4560e555cfabbc5c3f673a3ea371b4c","sha1":"7ca34031ca7076da546904db10d05e159ff16939","sha256":"7fa9830a0c01a1f82ba16ce3adc6df333e32ec800f9ba8efe5cf94f56c2b37fb","sha512":"bc1c98df9f836e1edec4d5652884515db41e203e51fecea4144a9a2feea585c87f18d9b56364c4dee00de900cb8441a72cfdb8cd8884fb14fc3ffb493ec93e07","ssdeep":"768:TDWqJ4RgG+eanRpzonmEtyJT8gtb3tCVsUuNkR:TNJ4Rg3eanRpzoTyJT8gtb3tCVsg","tlshash":"f60308f45849c2dac432fc8a4f97aeb001153ac74add1dc586f91e3ca9947e8f1903ae","first_seen":"2026-08-18T13:49:53.249972Z","last_seen":"2026-08-18T13:49:53.249972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.440Z","timestamp":1787060945440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/platform/XTB/logo_144.png?2.2.1781208239486","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:06.349Z","timestamp":1787060946349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /platform/XTB/logo_144.png?2.2.1781208239486 HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-54b8\"\r\nexpires: Thu, 17 Sep 2026 13:49:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21688,"size_decoded":20542,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"88f52a5da318eebc44251b7f76676f1a","sha1":"24c87eb81f4fbec54320efa149a85fa9d0efa5ef","sha256":"c6fb4302e85dbda685c148670eadab19226afc841a5e779f46bf009de5a68d75","sha512":"475bb443cd5a1fe336c1943607e473843b9f8ff58a277d8dbd6347459578be3b8aa67c28893d8173c0a8a1c0323b8e534c99cb8ac1641c92ca4d2d2c2666c914","ssdeep":"384:l7kjrDjl59kSrbs8FQJvwpbkhflARPfCfRgi/CEqUsWe92:qjrDjhtbb24pbkfAxnu6U9eg","tlshash":"c5a2bf14d380153c4bbe37dd21590d4aca64e544c3a4fe0a761a49fd9e0adf52174bfe","first_seen":"2026-07-17T15:46:22.831521Z","last_seen":"2026-08-18T13:49:53.25106Z","times_seen":6,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.412Z","timestamp":1787060945412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"kava\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39212,"size_decoded":6370,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"df8adf8f6007730c6c92a940b3091da7","sha1":"75b9cb04b12d0f4958af24f59dea9c7930bc5284","sha256":"afa7f39048f2ffad07f726cfcf7f24ba43f3b747f81c8c34cb46dc2a1fa88be7","sha512":"d8f49c4649acf6a74340197e5f5ebf4f3a15b6cffcf6d8d9ddd623f1747abb7f365fd929c4004c7c876b76f0d0b38d071fe3d6d68c7319f940bac9204cfcce1e","ssdeep":"192:0G9Wih03KMBVjZgQGIK28ePoRnnwL3V36/gQTNWUZ66aWw3Yj1+DMFCapOgo:07iYz3jZmnwL3V3egQTEUZ66aWPo","tlshash":"e00312f9c988812bc5306c991f87ad90b00339c74bdd7cd3c6bdef65a990630a195ba7","first_seen":"2026-08-18T13:49:53.251629Z","last_seen":"2026-08-18T13:49:53.251629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.439Z","timestamp":1787060945439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/assets/js/i18n-20260611200355-8tVcdWZO.js","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:02.581Z","timestamp":1787060942581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /assets/js/i18n-20260611200355-8tVcdWZO.js HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 20:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14af-67a3\"\r\nexpires: Wed, 19 Aug 2026 01:49:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26531,"size_decoded":8647,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26531), with no line terminators","md5":"df1705a875b7e72c0a9c5b230acd677f","sha1":"e86b0b99668bf26759c31e7c42abdb38b4239726","sha256":"c1f83a0a40565d542c451364b2de0bcc33b100dcbe340c244ce76a137504a222","sha512":"acf7ddfd79d67919b88f90719b2398c1d0e67ac83f15021bb68b684e3a3a8490c9a949f650c66ebcb5964b531fa68937d29f6187ccfb9a6bc1f56f93d2a33e48","ssdeep":"768:3tX6hY9Veagrl0nFUi7iHC8LBbXlpPpaUcnDWQ3E8y564aBxY6ixzRpxaeEbew3:3ayww8LBjYDWYoY4R/aSC","tlshash":"5bc2d7c339e77016977681e2757311926f2c0b99341fd9c9b8b9978b3b2ac4d03b6b24","first_seen":"2026-07-17T15:46:22.790351Z","last_seen":"2026-08-18T13:49:53.252726Z","times_seen":6,"resource_available":true,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.441Z","timestamp":1787060945441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.407Z","timestamp":1787060945407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38274,"size_decoded":8831,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77ea3c1db4ecb1a6a16fc81d921230ca","sha1":"ad0c35aeb833e8c8497f6833dd7eb7e98a5652fa","sha256":"7428c5274115cedd6a4ea623dd4e89f2527e21ccdb4df69ba659c746043d4d3a","sha512":"4ae2bcd6b405a2842983297d3157610ac98a852516b5f987b0b1a8d9b0239db4ee149e0a820d500ff4af9f9e77fe16fd904e709ea01681ffa675b120836750e4","ssdeep":"384:uXRPdKrYXtDZdoFpYQEqRKoXaXNy+0vgEmYJKt7/zFkw59yyMDSqcJsAY+sTXT2B:uD9VdoFKqRzKlqc3su","tlshash":"e30306f04948c1d9d4729dde7fa3bfe03d123e9ecadd2cc1828a1c44a9972e491653b6","first_seen":"2026-08-18T13:49:53.253346Z","last_seen":"2026-08-18T13:49:53.253346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.410Z","timestamp":1787060945410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"coti\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40470,"size_decoded":7643,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8bb1734a237b067f694f42680c882aa4","sha1":"d91eb14f927c339f45b00b04635f48d2165d417f","sha256":"a651c4235c277b6a77ea7e698fa454da1d6eb4039ade203536d70cf5e2cea354","sha512":"83b53e5efcf45841be877956487d7e41270db33855f93ecf9829800a45d590b9c223836a1aa6cc0a5ff31bb052af686ddbc9eba80378f2b6772dd28a2a49a0a5","ssdeep":"768:j/JvPVjsujUQLs2Qdn2QNs5m8nOTeCmbIej3FhC3hejm6vp1s5p5ncEsHfXTRhMm:N","tlshash":"c80375798d488259c532ac9e6f97fef0045236c70eec5dc56ace1c44aa90ef0edd53a2","first_seen":"2026-08-18T13:49:53.25479Z","last_seen":"2026-08-18T13:49:53.25479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/ai1.svg","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.681Z","timestamp":1787060944681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/ai1.svg HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-2d31\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11569,"size_decoded":3823,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad7f348370ad25512357d8c7c20b3ac","sha1":"a451230898d83bb5a76762e1f4bdc9deccf49462","sha256":"b6501107cf61530810ec864b8d58f3ec21275ffa0467d01a7a969663588158f3","sha512":"1510f8c8cf0d9c49b23035370f90fc58d88300d3c649ecc29b8454296f967c16e6cc8339eeeaabbd6e6cfb1c9cacf26d48d06b41d1351070bacef700092aeb91","ssdeep":"192:oreDaEOJ8rpKaEJtym9iiSEYrydZm94rUD3o:oreDWJ8rpKRxDS4YE","tlshash":"4132742ab3aaed7af140d3e8ca42c035215556e37641d1a1c6e06f6fd8201cd1a7fdcb","first_seen":"2024-10-31T21:21:10.384677Z","last_seen":"2026-08-18T13:49:53.255797Z","times_seen":175,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/78f0988a8d3a42948901b9a60b104e76.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.358Z","timestamp":1787060945358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/78f0988a8d3a42948901b9a60b104e76.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJjja9btRtJeEhXHJsgZfyuXyaPLcfSMBOakjfIoBWgAxsFGOh_JgE-uRiM9-TuSuCr6KSiQ\r\nx-goog-generation: 1776238939580056\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 28395\r\nx-goog-hash: crc32c=9bkw+w==, md5=dhNQ9QavvkSObCIILwf5Cw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 28395\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:42:19 GMT\r\netag: \"761350f506afbe448e6c22082f07f90b\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":28395,"size_decoded":29101,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"761350f506afbe448e6c22082f07f90b","sha1":"adf07a698db965e7c919bb62555feafaa9cae7c9","sha256":"bd24b614c1b64359d8c353ee74c92e21a53afbfa6a827c5ce1ab0b2f32871899","sha512":"17358171f9e7e4702f1f2f6e81a323461c141f7ef9e58595bb10211f32e6ff305bcb2160da34b970a87316e86fe3615b5113868fa3dabcdedd9b5a23a718d746","ssdeep":"768:SOhSFWCMb4srS6ZQYfvnWF+GP7T71Gc7Rg2pkk:SOyWxbCSQYffWFVlf7qlk","tlshash":"25d2e11088b32da6c6d1999fa13cb34d8fcc1b2e99b76828d8f5e9474534f18a76e017","first_seen":"2026-04-22T17:43:19.363068Z","last_seen":"2026-08-18T13:49:53.256755Z","times_seen":5,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":13,"receive":9,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/6296759fc7c844d1ad85bb35a6a4521c.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.364Z","timestamp":1787060945364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/6296759fc7c844d1ad85bb35a6a4521c.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJjja9bxhp9FLqs0WZTzRbBL3Lg8VSy4rl6jMlTHE076nPnBLQpiFGJgTiv_QnCBgjLOyIBC\r\nx-goog-generation: 1776238973092393\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 110162\r\nx-goog-hash: crc32c=6GofhQ==, md5=3risCfhqxZsMHX+ovUV16w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 110162\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:42:53 GMT\r\netag: \"deb8ac09f86ac59b0c1d7fa8bd4575eb\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":110162,"size_decoded":110870,"mime_type":"image/png","magic":"PNG image data, 395 x 395, 8-bit/color RGBA, non-interlaced","md5":"deb8ac09f86ac59b0c1d7fa8bd4575eb","sha1":"7bae474e195aeb5bdfc93e9deac9c05043e1b3d6","sha256":"2dd0fcca2d27625d398ee93a3910bc3c7ab1a4eaffc3dd012d5eddbf96753bcc","sha512":"fd10c86044a89c8ddcc0e5fb0667a4fae1dd6ce61404ba5cd5f18fa11a455db276132e44591f8e394da9ffcefecc9fd58a762716e833a35adec60989e9bf7185","ssdeep":"3072:cEp+OLYDHutahVzM/ZlYUu4iWDrN4eZrsEXL:c/DHuwhVzMn/94e1b","tlshash":"13b312d48b910ebd86db2a6c7283560a82dc68ed5de41c0f15fcf0fedd91948a646f70","first_seen":"2026-04-22T17:43:19.515311Z","last_seen":"2026-08-18T13:49:53.257475Z","times_seen":5,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":13,"receive":28,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.406Z","timestamp":1787060945406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35991,"size_decoded":7943,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c5aaaad4f1b230301ce38703c14f9874","sha1":"c968f293a96abd4294b5a3ff2278d9566a347e55","sha256":"446014caf6ea18bb960196534b0815af6465a8187e60e85fd72856e84497adeb","sha512":"461b1b2465813c76ceb929a361fc3ca602da53c73f3e232854a971f6fe2b3d3877af12c0fe7e706d61b029296c924e58568a2fb95698a0cd4cd49c13233b0b25","ssdeep":"768:5AQU78ylz718Li3T2VAdBZU9PPkFZq92UF6YDjgPMeuon90GnqZQmL+28sNrVz5K:5APbh8Li3T2VAdBZU9PPkFZq92UF6YDI","tlshash":"e6f26cbc98a884a9c9b7adfe8b9bfcf4045333c347dd0d4076ad95256ba07339019792","first_seen":"2026-08-18T13:49:53.258436Z","last_seen":"2026-08-18T13:49:53.258436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.449Z","timestamp":1787060945449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T19:45:02.007674Z","times_seen":17978124,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/common/getAllSetting","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.342Z","timestamp":1787060944342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15323,"size_decoded":4741,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14933), with no line terminators","md5":"641c6f6ec93178d267c2d60518da72af","sha1":"2969a48630f1c3bc5628bbedbecc17e961e662a5","sha256":"d6a99fde901efa32f824f9987a76a959b789e0c22c4ca5715d5a7ef3b8ad202f","sha512":"03c7187b0008f13f748459f8756a56e1e6e599a1d63b58b7711d31ff1a4f931fd0bd75c4b478d44bc8b3f721191b35e356a6324b3ee2d5c82b9ba78d79081a66","ssdeep":"384:B81jbpb9KoTqHwZoQR4w2eusMJMIwTSCS+O69dbgc9yT/4GNZK+8dKK3Gmw6j33X:21jbpb9KoTcwqQR4w7uVMI6SCS+O69dh","tlshash":"8462648a31cccc7dda9bdfe250f33ad069682586d84dac15c1baff6c89986205c4710b","first_seen":"2026-08-18T13:40:58.324771Z","last_seen":"2026-08-18T13:49:53.260055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/svg/light/notice.svg?2.2.1781208239486","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.667Z","timestamp":1787060944667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/svg/light/notice.svg?2.2.1781208239486 HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 994\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\netag: \"6a2b14a2-3e2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":994,"size_decoded":1434,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e399bf50254fa4b12e8a0959d171d0ed","sha1":"f45a07a56d5901357826ede835840a6a700209b2","sha256":"417f5f8e092161317f0e5cf2c41082a699ff951521208adf625391363ef2a31e","sha512":"e3b97813d6e0e1cfd57d4fb580b54a6a2e249059e25a750c83dfa3346a6bb093fa35ebe32d87b6321b4bff91253434071a14796ba3f2cfe3ec195ab752f9a288","ssdeep":"","tlshash":"2711eba8c249922c9164a38eb9788941c818608775d0dcbda25d2d944b328fb6f985df","first_seen":"2025-10-12T16:34:39.877907Z","last_seen":"2026-08-18T13:49:53.260998Z","times_seen":32,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/api/notice/getAllNoticeList","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.675Z","timestamp":1787060944675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80,"size_decoded":710,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f8f93dff581d019d82434177724b9275","sha1":"939cde23fddd8d05611de39a3dbd8bbba8a53e14","sha256":"3dbedb5822855a46881e735a2c9eeb16a9480b0816398675d988719644af732f","sha512":"3e97a77df5ce962667c954ea19e89604cd73e6f04880883a79a9b517cc5542ad33e0ddf6597b7cfae006e24cbb856041ebb0f0550b3b0cc19ab72148cc184a57","ssdeep":"","tlshash":"ada012522ce89141b473a85580050104055023142524410408d40039874c212bc90434","first_seen":"2026-07-17T15:54:20.10863Z","last_seen":"2026-08-18T13:49:53.261746Z","times_seen":5,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exxtb.com/resource/images/light/chat.png","fqdn":"exxtb.com","domain":"exxtb.com","tld":"com"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:04.687Z","timestamp":1787060944687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exxtb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:07:17 GMT","end":"Fri, 13 Nov 2026 14:07:16 GMT"},"fingerprint":{"sha1":"EA:35:86:F8:B4:6F:BC:5F:C7:EB:B6:D9:77:EF:89:24:B4:1E:38:0A","sha256":"E8:02:91:77:AA:FE:45:F4:E8:EB:49:15:2F:53:DD:04:3D:C6:F0:D2:D8:BB:CA:A4:88:42:F5:79:5B:6B:30:4F"}}},"request":{"raw":"GET /resource/images/light/chat.png HTTP/1.1\r\nHost: exxtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Jun 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2b14a2-279a\"\r\nexpires: Thu, 17 Sep 2026 13:49:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10138,"size_decoded":10671,"mime_type":"image/png","magic":"PNG image data, 391 x 391, 8-bit/color RGBA, non-interlaced","md5":"c0b8583d102ab70eb5a9cd4e1ac47c2b","sha1":"ecc2a351a680d2c01b7070b167755e1d9c088de6","sha256":"33123e4b44608f7db2cfc5dc0e6d0fcf0cb06c5e8ac056a637e43dc79a55c407","sha512":"633def91d6eea6f4d338b49bc2d0540eadeb278b6510c824d8e2edd6a0d0bc6f205639cabb5db6bed89d6f7bf1fea63a51f8d877cc0592528b288a6e37210207","ssdeep":"192:LEJaISqTHLkndsrQKyeSZD1sOikJbazA0PkQJprNKIOqJPj9TDiXVLJxkK5DX:LIaI7HwndscKy3bziObazAWkQJPKU1DM","tlshash":"b522bfcd558e4520a9e9203191c6631adf38e9ac7a5bf6a1fc31c4c553a2ce2e74b618","first_seen":"2025-10-12T16:34:39.749254Z","last_seen":"2026-08-18T13:49:53.262726Z","times_seen":87,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"exxtb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exxtb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/a7a3bc53c2cc4546a5af36c6c5731efc.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.369Z","timestamp":1787060945369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/a7a3bc53c2cc4546a5af36c6c5731efc.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9auXIhtOecLxtEAgppt7f4UVghn_4fAebVI2HFvaC_Gt7OiUOr2HKT_mD-ZciNV2UsoZ9fW_dU\r\nx-goog-generation: 1776239032236893\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 639326\r\nx-goog-hash: crc32c=cw80yQ==, md5=JW1jzpMZu7ebSB1xGBvROA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 639326\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:43:52 GMT\r\netag: \"256d63ce9319bbb79b481d71181bd138\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":639326,"size_decoded":640061,"mime_type":"image/png","magic":"PNG image data, 4234 x 4234, 8-bit/color RGBA, non-interlaced","md5":"256d63ce9319bbb79b481d71181bd138","sha1":"ca2dd6dfcd51e678f86a4f378836f9ab1db373b2","sha256":"e57118bc0b70646d992bcbdf746bc21f734aaa1e9d3030b4cd875bfd1e89140e","sha512":"f005e55695b685345dd4da326729be778da25bde006966901fe746ea7a51349081929e044f48a785cfa8f95aa95ab8af00d6e33847bfe0d6e96d632fbeafea50","ssdeep":"12288:9H8Anwn5MrblyN4xeWVBKRLb6lMOJAi1z+5E8W2dL8Hc4pbc:9bnwWrkN41/l/JAih+5EP2dL8HcL","tlshash":"3ed46918c3568973b78a486cf9615a2309a06efb3114cc1665ebb40f7793fb40db8ed6","first_seen":"2026-04-22T17:43:19.488537Z","last_seen":"2026-08-18T13:49:53.263497Z","times_seen":5,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":39,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/ef482b58833f44e7a69e61ea4154e54a.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.379Z","timestamp":1787060945379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/ef482b58833f44e7a69e61ea4154e54a.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9b18WORYxU4iXx8bodRtZKfRr7CoiO4eSXEmK-SWTZ3RwXBpWv63fWuaMM6V-V96luS\r\nx-goog-generation: 1777917185946143\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76582\r\nx-goog-hash: crc32c=ZfY6OQ==, md5=XIhg9nTioXwRiepBW/r0JA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76582\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 04 May 2026 17:53:06 GMT\r\netag: \"5c8860f674e2a17c1189ea415bfaf424\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":76582,"size_decoded":77308,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5c8860f674e2a17c1189ea415bfaf424","sha1":"16ab9312916e4108a7122cc6bf17b2d6c09657e4","sha256":"3a0e49a4ea6137d404a81ad2ee3d4ed4d1ae51b518e8ff697acb3216faed511a","sha512":"8d126ed5c04c75f9d5bf7c81024565ae8edc41e08ad4d792fc8daed60bad4ca2efb4cbe58044a40bdc7b20318bd947a21465f90fcbbe454c85eef82c63d6132f","ssdeep":"1536:mLMuP9h93b84f11RkhF3aTR8bO/aeO1+VbBCl7VNAgHQR3S7hXtgJjuacwRXU:mAaDy4f1R8bOCeO1yc9VN7HQR3S1aJj2","tlshash":"637302f48991f123730aa7c75a8d81fa646337ecadd87b103c5fa59818622f80f55ec8","first_seen":"2026-07-28T18:17:04.031889Z","last_seen":"2026-08-18T13:49:53.26419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":51,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.392Z","timestamp":1787060945392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42138,"size_decoded":12343,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8ca116d2fa580b38fdcf8dd455ab98a1","sha1":"be015b165fedf3fc060bc1150742af4f442e5f44","sha256":"31e5d81401534e14854d99e4062cf73497b381f24825e1c7bd78485d2549c0fe","sha512":"930652e9b59454584da676cf6e9d4205c04252137facde7e704929172415e238fbc79144feeeb7d65d654c245e9b2c0c9321abeb5c936ee3abc7068d6c46e986","ssdeep":"384:iLYqQTzrvlgzZi1ooWSHC4m0lUW8gMbf46J2DD9ULldwPE:iGTYhWC4mOCf46J2aLTaE","tlshash":"b3130fb1fad8c459d87eeec2bfd3fdb0091633e717ee8d44968a24218a90321c6557d2","first_seen":"2026-08-18T13:49:53.264692Z","last_seen":"2026-08-18T13:49:53.264692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.417Z","timestamp":1787060945417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpusd\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":798,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0d9a805e56e4b11f1a68049543fd18c4","sha1":"e6f3c0fa7d0d49b0e4638bbfc8045e28020ef67f","sha256":"a0ab3ee7e18e5125071eb643d9a84f07e6105a6bbd3ba5096124c1fca9bd330e","sha512":"d2fcf63a6b8437c0eba0aeb61baf502d687d18c580d7c3ff4927c2bc64874d2577214ac643a9f4cf36ab0a20f9ff712fcaf5414fffbbf2a4343c444159ea635a","ssdeep":"","tlshash":"8bd022a54888cc82114e22ef0a410302faf900ea26051e0d7e9a9399e3cc93fb007e80","first_seen":"2026-08-18T13:49:53.265819Z","last_seen":"2026-08-18T13:49:53.265819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/echo2-upload/8965130a8a954f9bb5f5cf1780a3cbc6.png?2.2.1781208239486","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"34.144.171.27","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.371Z","timestamp":1787060945371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:46:40 GMT","end":"Wed, 28 Oct 2026 20:46:39 GMT"},"fingerprint":{"sha1":"ED:60:6C:E8:88:26:ED:46:EF:37:8C:26:77:88:D7:1B:03:5C:41:4A","sha256":"83:07:85:32:29:77:4E:DE:2C:99:E6:C6:C6:CD:54:99:1E:86:2D:38:B5:C2:1A:CB:C4:2F:9E:B4:E7:EF:95:64"}}},"request":{"raw":"GET /echo2-upload/8965130a8a954f9bb5f5cf1780a3cbc6.png?2.2.1781208239486 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9YFl_AWLINd0mhAFeAVtsJwKHts4XUmF3w7m6HRpj_BCdP4J4gxtVwvdcHeFSKYTs-xCvr_EY0\r\nx-goog-generation: 1776239216783374\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 17866\r\nx-goog-hash: crc32c=SsStnA==, md5=k+ojqJkpCdNN0XWVkqfwRg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 17866\r\nserver: UploadServer\r\ndate: Tue, 18 Aug 2026 13:40:01 GMT\r\nexpires: Tue, 18 Aug 2026 14:40:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 15 Apr 2026 07:46:56 GMT\r\netag: \"93ea23a8992909d34dd1759592a7f046\"\r\ncontent-type: image/png\r\nage: 545\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":17866,"size_decoded":18599,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"93ea23a8992909d34dd1759592a7f046","sha1":"9f6f54d905fe065778c7b7d7ca860829f74ec16f","sha256":"5e9d4bc507c254ec9f7ee5e5e151850fc65bd158d4723c7a295086cd6877bd3d","sha512":"d9e5d8ad67224a9bbada0e448bc8f89393fd23616396cbbadaa8fef253cdf5ac1dfcd53aaeee5106e3f1207993ebf8e842e5e47f23380c6ca24a438735ad30b0","ssdeep":"384:rIF/TWf7Y6sU0oNP82LllchZb6BSADk6SgMI0LOP3PiqRRuy:UZ6fhD08HLUZYSADdSrhLO/PTRRuy","tlshash":"a782d023cd62900fe4354dd46c9424a5289fc1b4401b529e7a09b7f5c815fdbefabf20","first_seen":"2025-03-17T02:06:07.825959Z","last_seen":"2026-08-18T13:49:53.275519Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.info-wss.top/kline","fqdn":"h5-api.info-wss.top","domain":"info-wss.top","tld":"top"},"ip":{"addr":"137.220.205.157","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exxtb.com/","date":"2026-08-18T13:49:05.425Z","timestamp":1787060945425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.info-wss.top","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 15 Apr 2026 06:12:39 GMT","end":"Fri, 30 Oct 2026 06:12:39 GMT"},"fingerprint":{"sha1":"A4:D6:D4:A1:82:DA:8D:64:37:B7:51:C4:8C:AE:EB:41:4F:D0:1B:F2","sha256":"DE:06:6D:38:48:BE:FE:B9:B0:52:F7:42:F1:BC:28:C3:DA:25:DB:05:BF:24:AE:12:EC:64:03:70:ED:C5:CC:7A"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.info-wss.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://exxtb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"eurusd\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:49:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://exxtb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":799,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"823bcb71249faa0ea1a9195147b5fce9","sha1":"f09202cf47d9f19ae799bae0fb0d728a62fc06df","sha256":"5316254bce80a6a4c8bef6183e253900d51dc18f17619c634400cf5f3c6ba45c","sha512":"1e55823901e5e77c89dba317355c002bde93fd477dae79ec5badb33e371b220eb66f381a08f5f41885f47320efa21c7fa99a6a568e50e2d8bcc2833d07d07ff6","ssdeep":"","tlshash":"20d02354159445d1149b59d74f410704647c50db13041708f96d91d8d19ef9d7403440","first_seen":"2026-08-18T13:49:53.276283Z","last_seen":"2026-08-18T13:49:53.276283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}