{"report_id":"76edfb30-8d6c-47b1-9ebd-ab4ebfcfa932","version":6,"status":"done","tags":[],"date":"2026-04-15T05:27:48Z","url":{"schema":"https","addr":"poloniexexchange.vip/","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"104.21.16.31","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"poloniexexchange.vip/","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"title":"poloniexexchange.vip/","dom":{"size":78848,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (42897)","md5":"ed516ee9023ebcbf771a3970b60629fb","sha1":"d59aff49eeaab5aff42f4c7a95eb9bffd4d28ade","sha256":"9950b1c2fa3c1ce38d78adbb803b80a9aecc02c08fc9009cfa85c8b409363b22","sha512":"c697ff98c061bd14c7496778ae6054ee0585a9940f89b85e4bc2bda6932197ba79d692b6359a31a9fbebfa6b702dbf5853b8ee13204ded4e8a0228bab6f2d9f3","ssdeep":"768:/tTj1tpjv1GTkHHKuL2LewE3gnGvuV+oY9vhF:Lj1HYWgmoY9vn","tlshash":"d173c864b7c1407706b78fca95a1be6c6286e36fd066d098b2bd43d81fc2fe4f546490","dom_hash":"domhash3b19a5aa6b5c38d9b3c8fbf11c4fec58","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"poloniexexchange.vip/","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"104.21.16.31","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:27:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"poloniexexchange.vip","ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2025-12-21T22:47:04.057502Z","last_seen":"2025-12-21T22:47:04.057502Z","alert_count":366,"request_count":122,"received_data":5273517,"sent_data":56559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-04-05T17:22:31.288324Z","alert_count":0,"request_count":16,"received_data":40679,"sent_data":7380,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-04-12T13:36:45.683059Z","alert_count":0,"request_count":7,"received_data":338110,"sent_data":3675,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-04-11T11:40:59.974805Z","alert_count":0,"request_count":14,"received_data":32644,"sent_data":8445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-04-12T11:55:45.782885Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"104.26.13.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-04-09T05:11:07.477236Z","alert_count":0,"request_count":1,"received_data":1858,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a1ade1fc.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"afbd5b4f8e7f8b2912972faea3330203","sha1":"7f14c7ce2c7d70e5dd677a5faf04d1a57dce0553","sha256":"08c1d3313dd2f22dd0a9dac24efd7cc641e2ab3e0a38378ab2e15f358f5aed21","sha512":"95c04b7b6bf21ea096f5ec6c16d01a33e563c1e05315709393b25feffa6bc62b32d524756c5b315fcee364bb2c6026f6a4f842e884ae1ec6cc482d075646112a","ssdeep":"192:QBhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:Q0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"1672a7ac3693bb28a9875bec26f55150f6343812442ed5bdb6ddc3e28f16a844cb2371","size":17121,"data":"","first_seen":"2026-03-12T16:55:22.825409Z","last_seen":"2026-04-15T05:45:13.379612Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1aae9526.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e35c6d2283184da2e2ee2f962d978617","sha1":"77642f77d797186b495e610e59ea15f9e8c0b170","sha256":"09dfaeb54ed325674968b34ba9e5c9053deb7de0675545af1a9c047e322c6712","sha512":"8c7a6804cbe68fe7a0a3f1a4a06a1ef242a4061e0c617c5c43ce2e037702099396d04d33df92b7483b16fc858d72b7d11a869a8660ae30ab0a5b933e27a0e014","ssdeep":"","tlshash":"642136881669d7f205859599c6e9ad028125051bcf28d0a173cce1dd5f6ddc4c5a6b33","size":1384,"data":"","first_seen":"2026-03-12T16:55:22.822404Z","last_seen":"2026-04-15T05:45:13.297627Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d90b3301.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8c674da81682dddf5a26601684c71665","sha1":"ffab90e19b3e776309f73b6d2bc84f8794ef833e","sha256":"791a8e9aeb19cc2459a8ef12619ae653d77216a3dfd33bdf6fdcb0f2e489bfe1","sha512":"e3289b8c81428fa5f21958a048f9eb4d902e2a56b4236831d400a85a7cceff2bd5e6821783cc60ef06b149bc731c9fff42738099b4631dfc0ea25937825ab432","ssdeep":"","tlshash":"af51fdc1ffa8a26ab70bc1bd155ad914e333f00540295f7f7bca12f14f5d584241eaa4","size":2994,"data":"","first_seen":"2026-03-12T16:55:22.820744Z","last_seen":"2026-04-15T05:45:13.331089Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"939d5ed7952354468d68c7d0ad95cb4c","sha1":"f402c7b845087dcb86479606875bb6d6bcece0e4","sha256":"100384b853afc98771bbceb371f77e3cc0bd4d8a601c8363d1ea31035ccf941c","sha512":"542ed5bb829766a962245b5b32cd1aa40caf5ef780a8c68ffb6de057601ed8acb566afe514bf8b68f358fcb716b45645d92806b31753c13b4dfdf6592aefa84c","ssdeep":"768:mBEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:iCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"ae2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec51d58fd498869bf735","size":46159,"data":"","first_seen":"2026-03-12T16:55:22.864975Z","last_seen":"2026-04-15T05:45:13.325582Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/VerticalTickers-51842e44.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"570019ffb59b1cfb223a5cd7949c9c0f","sha1":"5c90a3e3e92c0416511cfd026f3fda75ebe31d6d","sha256":"e1a6013a6da2dd7f0adf9fe7a68ec96033c8121e15532a780e16f0c206cfa698","sha512":"8ab4224f9ad7cc8c26415a494b9152a05b542fcfdb72529f8a29e5e53d29c3b65aca566dd5c8ba70443ca47397aec07c9305242d4fe53d47124ad04377d0cac1","ssdeep":"384:i7589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:S+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"8ca2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb95d25f7fa9","size":23018,"data":"","first_seen":"2026-03-12T16:55:22.84593Z","last_seen":"2026-04-15T05:45:13.334247Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1d08d906.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4aa99fee6dafdfa0ca721935abeb1b6f","sha1":"ff87b575043779474c18a9edfb0884bdd35ed14a","sha256":"8e96b3d61ada813ca5d45f205022f238f7c3cac56ca5fbaadae85738b1fac16b","sha512":"ac5dabec749cbdd5e92ea0f27b1528304103d15c73938786664db42597383b01f8d48e014bb228fc1ee4a33ca7da820a13006e48956851d531e348944a4c1e12","ssdeep":"96:WXs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:Es7o9KK8ZMY2vcpaC5c7eI","tlshash":"3aa144c22daa252a3951d099ae5b8910e322c007d21dcebdb9dca1fccf595c3107e722","size":4734,"data":"","first_seen":"2026-03-12T16:55:22.857337Z","last_seen":"2026-04-15T05:45:13.345845Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-908eaf68.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a45e7de68b26701f37dc8ac7e2cf75a","sha1":"3977c612faf9663fdcc5eee807fca284fd9eaba1","sha256":"4416fcdc9f731a72fac68cc1b4f81d66839da5bd12ff93fdd69dc9e0dc96c595","sha512":"b168da57c881a2284952b719195857337bf4dfe63e18bb2382ae77cb5de2d1e6c23e214b0b5103bd911d018b3137d7869894349bff2c68d9a55b120e64876d71","ssdeep":"","tlshash":"a55197c1772b50b59107e0d40faacd000b2291279526cabfbddf71f58fae7496819332","size":3131,"data":"","first_seen":"2026-03-12T16:55:22.808918Z","last_seen":"2026-04-15T05:45:13.33511Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-500545c0.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"de35a8a60a9117e3cf0b29cc71f26838","sha1":"4615b88938ffbad2a0ef2744acf383cd8838ffa4","sha256":"fc996c43f3b0f20eb4d724f9c7af53fbdd66b800bcab392b690e9e32649f49c4","sha512":"ad4c41b71223bcc0bbfb7dbfd06e4ecc8ff4e29f6cabb8e55589666304ae61e1fd4634545f444269891a91a2190ffd87be9777a962339e877568a0ea8718f151","ssdeep":"768:ElYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:fAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"ce431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","size":56425,"data":"","first_seen":"2026-03-12T16:55:22.854707Z","last_seen":"2026-04-15T05:45:13.326294Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1107c1b3.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6510b61fb435b11e269b698dbf41a2a5","sha1":"d4484c8f930015cf050f7f8fc3429eb2878e4284","sha256":"fdec41b69bcf830b6339ba7062b12ae3064ce044a475e2de2cae3fcfe37e78c0","sha512":"e40fdb466a63aad6a911a28ec628f818e81a969a319482c1a120e6db9a5198a3b41cb51cebf4c7072b0070ce4f05f2c6984ed35e8d7162ea1d34fae4325baa17","ssdeep":"","tlshash":"9951b8d7b33a1176385592941eae4ee05233e01ba11cde3ebbcea1f84f461855c36632","size":3023,"data":"","first_seen":"2026-03-12T16:55:22.801034Z","last_seen":"2026-04-15T05:45:13.315655Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhInfo-6eb82573.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","size":2776,"data":"","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-04-15T05:45:13.352344Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9e1633c8.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f672dbeab2a79f477b63594fa5edb68f","sha1":"ce196a3702377e096b4681df1e2f7fa2c1f8a220","sha256":"92dc11e4d87dd1f996a4ef6906ba9957b4d852c53deca6368fe31f3289e2722e","sha512":"84a9780466f75eaf8274eab8307b6e1755fdaf43b08f844b7fe96597f04d59ec3d1eabd29ba638c33898e8d44d79859b3a8750dcfec241173c32dd561a654e6e","ssdeep":"","tlshash":"c9512e85b213a8f7386261f9069f9315662438120aacd62878dca596cfce7efa434123","size":2511,"data":"","first_seen":"2026-03-12T16:55:22.860481Z","last_seen":"2026-04-15T05:45:13.28835Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-ad0cf90b.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cda56e760bd25cfb758c254f2141c161","sha1":"1b0146e385cd09be690f8c1a7effe6addedb10a9","sha256":"99e8dc7c9dcd87b36f9295d175c89a4c762cd902b1901f7b4de4aeec121b24c6","sha512":"3eb32cca620e4e7da07411329fb966ccfecf48ff181f8a34d26a2f766c96a780bad617a2bacc3877d1e357650fc432290d4eb11f784d97a705a532479e486491","ssdeep":"","tlshash":"db516221f042ae3cf3b750652098784865410fa899646af7b1ee5e0f23d9d726b9f738","size":3101,"data":"","first_seen":"2026-03-12T16:55:22.842075Z","last_seen":"2026-04-15T05:45:13.308718Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9d24c88f.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c96bb322f6b946e216e9b7196dd940dd","sha1":"b4ba324d2c9e4b3310c3abfe32b3584e68a3838b","sha256":"748da57ce1edeaf713b242f2f378a28c3eda62c06b8afd5533342ba5e5d9f29b","sha512":"3b8a3f2471c58af71b87a85812c6f4d69f6dfd3f82e7a93cc16c77fc367b2e00d1d243fb38cf2aecec6fb5293c9802e56d95380077ad16fb7a805d0d034b16d6","ssdeep":"96:0jZJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0FJTFyhlqTsd9fTOsy6Xd","tlshash":"dca1a7a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fbd084d4df299","size":4963,"data":"","first_seen":"2026-03-12T16:55:22.863037Z","last_seen":"2026-04-15T05:45:13.346744Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-25e9e0d3.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a17a65675aae9c1402fa1dd8503ac6c","sha1":"2af0e6c7aae04538344e4846fcb14cfe677befb0","sha256":"ee425f7d56b3c1b5f4b1f7a0e87f2100fff5d820fb87f779c00aa3462c396517","sha512":"63efe203a698a4d4d2e12dc1a422ec0e3c99972e3f439151ac3c8e798a7cabcd37d0f7a8e3dca4973c7c5025b000caba735c3a3cbc74d4f88b3b5f0deaf0dcac","ssdeep":"","tlshash":"0241a4442268bab600c466d6c0968a405121002c590bc194b7fcb5e29faeacdceaf73a","size":1908,"data":"","first_seen":"2026-03-12T16:55:22.88049Z","last_seen":"2026-04-15T05:45:13.285313Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b0558491.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556ecdeb9bb7ebe08ad0ce62d0610ad1","sha1":"2249021bcb040da591a7a3717bf84c93bd257f44","sha256":"6912a59242d112cf5a57136922fba35bc1c1f9ad577cd101f6e3441b69247def","sha512":"359792ed4788b72c8e5ce6e243ee25ac636fdee54affa86dd96b8cd5b2a6e8dff4c4dec0a758c293bfaabf9952032a246179d125f50ad8792521673c3bbc4495","ssdeep":"49152:fzUmhCT1befIy2EUGo/PDXg0sw0ERirdxQR1lSE0775FJZICKDhlhTqfXxy3yKbZ:fCAXxuyKbdJKSfXtyS9","tlshash":"a4e58e847295b07907a755d4a4671102f1385ca5b05ec0a8f6ecd8fb3afa889c67ff38","size":3265402,"data":"","first_seen":"2026-03-12T16:55:22.89109Z","last_seen":"2026-04-15T05:45:13.396161Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-19T09:05:39.411241Z","times_seen":4701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/ref-3335a8aa.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c74c45c1bc4625c4b3614eb4c826dc20","sha1":"97fcd282303451b149ac68ca0d2b64758db0704e","sha256":"72d7bd1827c0c2feca9b6c730880c3d5151b39580ed02253fa6b4935669a9394","sha512":"d41e51ebd278c80ee41c96ca9f87302121a5435430de2b980ec7e60d1aa3cdb5d9a04f3a8a947c8da455d6960c14ff5a7e9c37bee13c01233cc17d14eb5835ca","ssdeep":"","tlshash":"3741f19773d801d212cac6e7fc37892af11131583a65845cb0ad6bf7e83068791bddb5","size":2156,"data":"","first_seen":"2026-03-12T16:55:22.859073Z","last_seen":"2026-04-15T05:45:13.366165Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-6857c7ca.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"861c6afe3395c6a9378ea840dead57f1","sha1":"cafb73158459679a27d00e420c15c65bab9335e9","sha256":"4645a9a90ce3679e043ce519f5eaa0092397bc7acf57eeedb4d225bf8863877b","sha512":"ab76ec9a16f5adf8de00af6c2674f0b0716d80d6f8cb582a23231cec865c0d30fe7810d5fba313d65238cd473589b10559dc60846459cbe79da430a3cda1d309","ssdeep":"","tlshash":"30515484a6a6581e520790adc7bf4c01973ae41fd029cafeb6dc90f54fba98115ba331","size":3036,"data":"","first_seen":"2026-03-12T16:55:22.801817Z","last_seen":"2026-04-15T05:45:13.3107Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","size":69,"data":"","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-04-15T07:13:33.540541Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-6c9cef39.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3dc3c4f44f473fb0a351fdb36531de8e","sha1":"57cce8b649feb62e9aff2d79818934d8f19e359a","sha256":"0681ad2b343ebadfe5203e239adc5fbbf0a8d2ef03c688bc0dc658e6b67456cb","sha512":"0c35fc6a6de7dd34c77ad9977eeb608caf90fc7cdaab09fd9168e412c05b4bd22318cc1be53e53a26ccbc7a3f34481b88738f424422674c83956cd00bea347a8","ssdeep":"96:U5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"f981c864b37d217a79c390588d366d01d334401ad11ec9a07bdca0a78faa2ca9db7771","size":4173,"data":"","first_seen":"2026-03-12T16:55:22.80659Z","last_seen":"2026-04-15T05:45:13.311649Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhCheck-1cb2a956.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","size":2110,"data":"","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-04-15T05:45:13.307598Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","size":1955,"data":"","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-04-15T05:45:13.324146Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-5c39d86c.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"31defc23a8a751eb880853e554c09c0e","sha1":"86f03041519abcd79610a36d9f0ded8cced111c1","sha256":"2a714fe6cf782f103d614ef3279efb4aae1b9ba2f39eefb999b072e749babba6","sha512":"594bceb6eb2a4399c18ace486d020101d6b75f27654437227c0a140a3272df8ea3aa0b9b67a45b100fb3e3d2edb2d2c15cba86047f14f9ae923a8a2fc84b70ee","ssdeep":"48:qAhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:dCgEQM0o8hJwisSPjgZDIKL","tlshash":"d58116c57fa815e53713c060aa9e4c25e331a027a8299f6e7addb0f88f55643781d373","size":4166,"data":"","first_seen":"2026-03-12T16:55:22.828645Z","last_seen":"2026-04-15T05:45:13.358352Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b7a416bb.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a304de782e3a1982407450b066fc8c8b","sha1":"651ed3180e6b7355d5330f81ef5976bbf8983c1b","sha256":"4e0d04746970c0922a7dd1da94db7a8abca6a52d27b964933cd46ec4e6094542","sha512":"4421f779724a80839930c82fab6341a9202076804a4c3dfb8ef5c88e42887c27df28581ee2655d708586e4e3f5a4a865083fd83b532207e6beeed1f79a45a1ef","ssdeep":"","tlshash":"2e81969ab7771864342b42a9fbde4b245232b05e0a1bdd75f3cc12d58f48a689b4b230","size":3966,"data":"","first_seen":"2026-03-12T16:55:22.821582Z","last_seen":"2026-04-15T05:45:13.269973Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-e6521786.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2fbe582fe14006d7f683ecd82a35c824","sha1":"964aea3d211de25fc724b73dc6c70a544c9b7fed","sha256":"fc736fed8435ab7769dff3a886a179ee41dcc2616a1ed474469893a9f64b1f2c","sha512":"74efd46a634a762510df53544ac9fac88f97d9281e940f16c2dffbe40518c3aa29c2e18465731dc3063ea4c63ad409506979a885d5269b0a32110f162e35d1b8","ssdeep":"","tlshash":"3d81d95252bb9178a861d1e10fdf16842216943b5a18c47ebaca61f08fc72bc9839bb1","size":3883,"data":"","first_seen":"2026-03-12T16:55:22.851031Z","last_seen":"2026-04-15T05:45:13.330314Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a8333fa4f5a7c115c3d338f715d710b6","sha1":"85d9623120c2753dd2de36578cf1cac587152bd2","sha256":"4812d4d9a9636856ee3e917a3bf0eee7042b1969f9bc5fdb900754755b32b90c","sha512":"96d4a581ff47246c45fa475a2c2874a2a2d2387d7ec1043b58ed94569af99c55647fab01eef77deb3ef15451d5c8cd1c15257efd4c9c67c3dd7e67de9dac188d","ssdeep":"","tlshash":"b3c08cc4a0c23f146702651110bf3af89034442679482b139de4e8993e620f09237eec","size":153,"data":"","first_seen":"2026-02-04T16:46:53.927086Z","last_seen":"2026-04-15T05:45:13.392852Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a5a83fe8.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fd28098fd42abb3e7c53052d0b7289e0","sha1":"83083e9919a8e4f75d03ee936c768b565190dc6a","sha256":"e7c4eabd860022c67d07d45a2e1f96ddbdf5b329315fcc1f0ad1fbb429d95913","sha512":"7e4be44e3aaca0093f2b141a6a626c45a0aaf441d4dddcba1bcc926f25d59401cd72680e3333cd1cbba730b494dcfaa34cf71d8e9604aa8cbd897be50603bf8a","ssdeep":"","tlshash":"71511188bfb43d63371bc065f0ae8521e335a03a9c1c9e3e739d52f84f69682555d932","size":3015,"data":"","first_seen":"2026-03-12T16:55:22.849579Z","last_seen":"2026-04-15T05:45:13.281334Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/send-e4234d39.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b0d2cd2bf6d091e7b13fc924369cca","sha1":"725001ffd2ec2989639a2c4dc36c656824eef75c","sha256":"a5e863d9306830012a0cc970d42c4cfa3c8108a9d4a0ba04221defcde4b97e87","sha512":"bbb82337a19f5c87de1e01bdf19b145c3dff823616d985f2dd67c7e5bffdd235ebe5242ba11f3316e6db5fca413734c7861c2b764a4b29344d7b794a2fe1cdef","ssdeep":"768:oaYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:zYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"03e2e89433fa281d29a7516dead69e006331501b811cc5fdfaeca2f18fa9e4248f7734","size":33591,"data":"","first_seen":"2026-03-12T16:55:22.815337Z","last_seen":"2026-04-15T05:45:13.312545Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/HelpersUtil-2286d400.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2577c54fa41a9dccc6706936ab629516","sha1":"d5105a9b203ee4b0cdc9069dd68b0544ba269bb9","sha256":"f6a93469ee23f561dd26bc93951d314f6a434acb3e9b817491ffb09bc86e262b","sha512":"eb1f2486d459eb023d8356c141554814aae7108d7c38a0fcb9c4f5d7ed3eb8f97e10c3d0f6b792af317d68e9b355411b19ac6981892d63bf01fb1bd3c97cb114","ssdeep":"","tlshash":"6c6145c5f3fe7e26350704a999adc5106336702a291e9f3e7bed53f84f0af81a856520","size":3196,"data":"","first_seen":"2026-03-12T16:55:22.832602Z","last_seen":"2026-04-15T05:45:13.296679Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/receive-dd4142dc.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69cc40957c96ab75bdd1be0576655109","sha1":"c0f74683887b55a4b4a52ce1467b19f682d2f73a","sha256":"8bed1ea7bc1dcd8183178033558f3d3c6e26868fa66f9504eb73b89d5a7d22f4","sha512":"da807948303a1ca83afbb3e0f37128f5c123356a843d4d11f0183858273540d61a98db52685c47a9d8afae66d5117d4b89f080fa316acb48d7fffb699f828783","ssdeep":"192:XXIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:nd23vx30IXuTjmpqAY4c","tlshash":"06d1c64559b638adb812d0981e969a00c131404f9539c5fdfaec83e58fe968689ef722","size":6621,"data":"","first_seen":"2026-03-12T16:55:22.839211Z","last_seen":"2026-04-15T05:45:13.321757Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-4b7f89b5.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a86e0f0ee2c1c7befb74cc5f4a84bf45","sha1":"3d588157398156805196a7d092edd30967308fca","sha256":"156156a0f7ba3c3a1c11b6950cfe15daa40de2351a65d53e3db60333e79b09a6","sha512":"b010ebc2b0f06f0c9547a6b27d53c8ef06a63520449c299dc9206b319081a15cbedf7dd1249e1bfeef5570806bd3b698eebf7a1e31066728614c6029633cf1d6","ssdeep":"","tlshash":"955144c972242a7637538055d19e4d117321b03ae438fe2e36dda1ed8fa99835829a33","size":2813,"data":"","first_seen":"2026-03-12T16:55:22.876186Z","last_seen":"2026-04-15T05:45:13.380429Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-dc6c0f23.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"34d4b40271d601275b4110dfeeae6f06","sha1":"8dc4be576be03d1321365f8e76eaceb6351ea1cc","sha256":"d6f2a417c26b0a4b457a8dfe02f13b7e478e6454b8698f7bec40706985576454","sha512":"eeed29ae3ed96b20ec5f0536081f1fc3a68d989c4c621178b9d467b034aac1f443ec12e5cd864d939d4d37fdad5d2f35bbe42586ff9fd31595e70738f9b09169","ssdeep":"768:1PYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:9+qIzcUWb67sHYbzyER","tlshash":"3723b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a719b1618edd6bcda","size":46047,"data":"","first_seen":"2026-03-12T16:55:22.83672Z","last_seen":"2026-04-15T05:45:13.362208Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/property-6708c68b.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","size":17735,"data":"","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-04-15T05:45:13.317839Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-c28c205a.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"40e152d7e754dc63fde36d1b623d9ce4","sha1":"fb8669015d6e5c3fc5094f46040cedf0f10865b9","sha256":"5a087037eee74c54ab329bad9bcf20e19e61e7298e9fa03b2aa7d6fcb377ea5c","sha512":"dbc3d1ca6bde2f174605de886ed7b4568d09628fcafe67fe0f353f935cb16e41caa68982f91e3236066f2b88c868dbb419a5a4d061db7f6c5fe5994e31cb2feb","ssdeep":"96:eo2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:32ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"03c144d5bdbd2e7b3517c028e16e86a4e334b0279424df3e77ac61f88f59942181c931","size":5676,"data":"","first_seen":"2026-03-12T16:55:22.817029Z","last_seen":"2026-04-15T05:45:13.336651Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-fc6d5a31.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3e1006835216683dc17e7b93a2b97ad8","sha1":"c486940c30ff8b9f716697ac8da66ae85be7be7b","sha256":"2cd22ea99865c65f65fc2aa037057dd1809df32cc0c6eaa9bfa937be197bcd5b","sha512":"476eff1023d4174f2900ac7a40a1b3598feaa34e5d50369adb226e7c66cfbab81dd7aa77f07ab2a9bbe29f138ef8f0314fb17a213422f94c94f669e8e0d1fd5e","ssdeep":"96:1JPHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1VHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"1881c5857330d912251e8a6867fb8206373a50274225c4fcb6cd9af84fbfe459b75b70","size":4104,"data":"","first_seen":"2026-03-12T16:55:22.824614Z","last_seen":"2026-04-15T05:45:13.298616Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b74b5775.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7feb369b0717ed940fc77726cb756fac","sha1":"039b1a4bb6172960d9d30cfcbfbdcee84ce7ebb5","sha256":"9d048059a94ebe46312c6f775581f0cfaf60d3107010b3841af248ccce58e6d9","sha512":"4d920161c3df1bfd7fcbbc6065b3d9c817fb75a19ec47c56690219ff1d42ac7b20563d761bde3e3e522c2c212a8d69a2bf44c55191d607da3d9a2e2160ef7ca3","ssdeep":"","tlshash":"cf319585637a24a424a3d0e50269da201235642a921fca7cb2fe71f08f7d4c0653b712","size":1576,"data":"","first_seen":"2026-03-12T16:55:22.799237Z","last_seen":"2026-04-15T05:45:13.357332Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d513d59e.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0a5d9db5082a28e1785d86b2db2525d3","sha1":"b8d079af4f4d0222acd707b00a5d1ccb7fc21349","sha256":"55f165fabfe1eb657a50423ceaecdea5c9228aec554634823f4b0971bccbdc7f","sha512":"19fa56c806521e40de628f7e1b4c98748762d91c8ec32592eadb9021a437c867cb8b5e1374a3a8109baf153d9574c93153492b075842256bc4dd9cf46a703c76","ssdeep":"768:LnfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:m6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884acfb4da9d37f79e6a94bbf2c","size":29815,"data":"","first_seen":"2026-03-12T16:55:22.878363Z","last_seen":"2026-04-15T05:45:13.320307Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a9b5a56a.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"15be76634ddc9d89e12f0471155339c8","sha1":"19960fe52cbc474168b5988c1c9d297e0e49a541","sha256":"79793f4295cfc478fd637b15d8abba228aca5a352981efb88c20bfa1cb6ae805","sha512":"6324b3662800c0c39853e4334a01e8aba6d52c63707f3cfd11873fcace34e311f8e580ef6feea25a7e53a479fe766b891ec2649dac5396b900e44608bca2156e","ssdeep":"192:rDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:rDEIRRuUCL5dmVp","tlshash":"27e1b601ba296e3cf73b84582406529561d09f59ea30c2f6f3bc9b2266d5bf22f5db04","size":6947,"data":"","first_seen":"2026-03-12T16:55:22.830914Z","last_seen":"2026-04-15T05:45:13.277003Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d0518d72.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3bd90731de83d6c59f377ef197bd6244","sha1":"e59af6e2d099541b9be9f6e525083256f4bcf1f5","sha256":"c6c6b988b51d40d0a6ef246c47bfb5dcf408448620ccf3e11eaf944ae978a0b5","sha512":"67b5b7f5fdc9b6f35a58e35a9b2f3972903654d3edceebf8daba0d0d2b01609f78e734f699497dd2f62d8d9b00f2296b1dda51cfc0e203a278b493c949ce8c23","ssdeep":"96:GdhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GdhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"d3a1c7f77167e7e0951747f5ccf73811611b3cb6bb064e0aa58ceac8de16184868ce10","size":4843,"data":"","first_seen":"2026-03-12T16:55:22.834443Z","last_seen":"2026-04-15T05:45:13.329394Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-ddb31605.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"01e180ccd3a6abc71fac9bb289ec4f02","sha1":"58ab965eb4025e21aa492a23bc3818bb463ea66e","sha256":"776ea42996263432291bbd28400bf5b5a72debbf92e503e64a544940bd551187","sha512":"71d9748d7232ddbee0751e6b55b7572239f72d3aa911de9ac5911946252af128dc4617533705ab524c4f7370f9bd07b5d5babbe38417ba2a069ca3c291c0c988","ssdeep":"","tlshash":"d83185c2f1db2579b37adcaac0984461d23c0949f50097e6f17f5c1a2b601c0bf5ab18","size":1814,"data":"","first_seen":"2026-03-12T16:55:22.823313Z","last_seen":"2026-04-15T05:45:13.314817Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/purify.es-ee0e7e34.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","size":21919,"data":"","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-04-15T05:45:13.293378Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/if-defined-39ff01ec.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3eaeda4a4879e8acad1735fb4ccddd26","sha1":"76bebef49b1e07d9e23f7986d5585aa5f68cf2f0","sha256":"e283c993d87fdea0d861cbbe0f8d02c57ef0b02b6ccc41ac5acaad8589bd7858","sha512":"f332fc370abf5c75fc6637fc1c35e2875dae57cf0c777d829757045d6232ffb41bb0c6b8b52610ea43f08dac2fe5f21a1440e8df99bcfbe12a46b8841676e6b0","ssdeep":"","tlshash":"20c08c12a82901e34cda038ee864cd4e5020326e5f524282b0a8234688321805a9ec16","size":161,"data":"","first_seen":"2026-03-12T16:55:22.81621Z","last_seen":"2026-04-15T05:45:13.309752Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","size":3315,"data":"","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-04-15T05:45:13.344822Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99f627175d32deced3144853ae54119f","sha1":"b9c761a937e659864b4f04fbf3d132c8d5c72e98","sha256":"85765635423c64ae5bcad7124ca3f875207202eab7339219f772abb11944e1e1","sha512":"ca22ddbf642440e4f4ad9cf8446737931589848bb2d0acd04419299905cf6336a380389f0eb417a68e6f53c4c9bda61489bbf641448f26129d68ca92ae95d2d1","ssdeep":"96:mq9hafUCzCSDKCfhpq+hqqGtdMVZI3o5R3w3fo8C+Nqn0Si:d9hafUCzCSDKCfhpq+hqqGtd2ZI45RgT","tlshash":"a7913e67b0e3005845a37a644baf732c393b600b3a0adde47d5e1b609f57f625482bce","size":4453,"data":"","first_seen":"2025-11-24T21:16:20.877428Z","last_seen":"2026-04-15T05:45:13.391424Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/home-87506211.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d712e767e3c0d7a822bb71d67ce3705e","sha1":"0a44a58e83fdc551200218f7bde60e87c277f69a","sha256":"a9d3a69be62287a2f374965222fe36327f5bba53476f692e82a3a5c9a31bd959","sha512":"5b3dca7b9641164e6b5bf076aa1f9089e82961eb73fc5c4c21423a0f8b5c2e16085cdf75042242156e36eeb61c51e6cd80d78912361077f62750b1af06e20415","ssdeep":"384:+POqo1Yg+ZEYKJmYyoLDpiS2L86DaiEkR64A/+r3RyL3C38su9INSAK6MjDX4syv:KOTR+ZEYKUF+piL86aeRe/+r3RyC38s/","tlshash":"1fa2fad9fd0ada3ab5b209944598000035141feee52181d1b5fd1e0a1febe7e13afb2a","size":22735,"data":"","first_seen":"2026-03-12T16:55:22.798104Z","last_seen":"2026-04-15T05:45:13.341339Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-7cf1ad98.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"69386e19d1259595921129156676e7eb","sha1":"57b44a4c9162e3bc65a45d86cad67af07998b0b9","sha256":"4f18a271ad4bd5e36ae65ad8941a7d278baac94681964b6575ae3a6a7a05ec33","sha512":"bf6b0c740470e63a2457dd8362a352cf4fd5ccde66a1fd8496fa50e400cb4bd06d24155a8db87f362b321ecf40288d744041d532db3c512950e4fa6a84fb7351","ssdeep":"96:Fi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Fi0K9+N+DF5si6SJHG","tlshash":"6bd12fd13e756e041523c939a7ae9d49e331a037c83989be77cc91e08f9da405aadb31","size":6313,"data":"","first_seen":"2026-03-12T16:55:22.843738Z","last_seen":"2026-04-15T05:45:13.368187Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-60a89093.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0b9d0bca352e5221a19406ecf3d0910f","sha1":"7b8db0102584b40289de1c8c003219a13f5fc8a1","sha256":"1ec0d15d6e4db8c4e8aad4c4c73b17befe3c1961631b9bda39a3c42087267e68","sha512":"0dd5fb1b30a765748570d9309e8038286eb566dc00eeeeb7b8c0ea177cf475edbf9c494a6f39d642ff95eaf9ce4150ae06341893d1eceeae2943dd46ac583d06","ssdeep":"768:XCzlkEh6WjzDJ/NCYUV6Xi7QMR+gXPJjNHe7DGls4+DBL+FUytuLUed:Szl5h6kwViiPRFRjNHe3Glr+lKFDcX","tlshash":"14e2f7c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","size":33100,"data":"","first_seen":"2026-03-12T16:55:22.811651Z","last_seen":"2026-04-15T05:45:13.347632Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-49d29c21.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d638dbc28c50dff4faed1ae0eb44709e","sha1":"fdb393477c3e25b2a826037cc1357fbb8b85d5b5","sha256":"8fef8e5c0bead675652fc0aad7c900dc5fa8a1d5a716facd2be3c8f373be5a40","sha512":"19abfad261a6b61b7d53d5f3e053c2b1af6a30cce047c6c3efe6254e1e737f1d9da2601dd71207cbfa4336d0fceaf0b1df3156fdbb49c0020c2e6f5540bff8ff","ssdeep":"3072:G5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:riZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"c324f8546bb069186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","size":229987,"data":"","first_seen":"2026-03-12T16:55:22.847583Z","last_seen":"2026-04-15T05:45:13.355342Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-19T01:46:37.29698Z","times_seen":989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-04-16T15:51:15.79349Z","times_seen":731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e0a7343e590e4b2e68fea466ac533796","sha1":"157955af910b602def2fb7ccb3cfc2349619433c","sha256":"1f4e9a9aaf729ae7aaa8082a6c4ccb3082cb5bca5d7ead0f6d129b28ba4ce60a","sha512":"fe989f835a81f1d2f0d611e0750312a9248350632f70aad49f9d0113d7d1ef287e2bb5cef46867bdeabf3a5aaa6f5b80ae07eca85a7ca81ac06e1e0d5b1dccfe","ssdeep":"","tlshash":"e6c08cc4a0c26d005a52a61110bf24e4a024442b70885b028c98e84a2e220b08233e98","size":142,"data":"","first_seen":"2025-09-06T11:46:38.61477Z","last_seen":"2026-04-15T05:45:13.399079Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9a6a5dc9.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b2c0a0cc945cb89cf466022af34f1e53","sha1":"09ccfd82eb75e2590f2ffa1fed3b7786c218fd3c","sha256":"6003c01736f7d50718c5c287059f788474debe9d23b75849215ada0e5c968a6f","sha512":"ea033598e556b3caec8382125d4ade834c0e72e7d48d9627dc63ed4c20d9542afc9451e7291fe9b6588a6afff5972924b99bbf259877c323561682ff923d72eb","ssdeep":"","tlshash":"e62183c9276acaf0896140768f25350132376007972fda86b6de7aa48f0c5c58a6a7bd","size":1427,"data":"","first_seen":"2026-03-12T16:55:22.807481Z","last_seen":"2026-04-15T05:45:13.303589Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-19T09:05:39.411241Z","times_seen":4701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-4cb28ea6.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fc565663046785c73279178fd07ee961","sha1":"432e3dd5edf33cc368847b9b160aa7bd91c20abd","sha256":"39f6d4dfe06a9415fc42e27f562fff81063da761a718a4624160b485482273fe","sha512":"188a59f70989b71c510977cadc2db23e3e72e08b527a87640d310dca088300f90bd2752f1c87502a08c55adab9c95bc2a50b3ec96db1ecf0199a440c672b966d","ssdeep":"96:vCz7IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:O8aa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"28b1a7d17190fcb7d739dacd406042e097ae57e07019c5deb15f9e03250acfc66eaa49","size":5151,"data":"","first_seen":"2026-03-12T16:55:22.831707Z","last_seen":"2026-04-15T05:45:13.335899Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-04-17T04:07:00.648182Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-c24422b6.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62c5cce2d8883f65cb2bb22412ad4452","sha1":"701a9c740954d6e33658fdc7bdd24dca5f9aa14e","sha256":"2c00853f4d1bbf86ac33682faaacb87d60fed67ba4ffe78305ed41dd497a422e","sha512":"687e8931ac7e355e7460dbaaa828e09ed28aa9c624e03975fd52e13b31021681ad8210ee294dd957f83f50d005cee5143d4be2993475f2fdb652d4fe1868cef5","ssdeep":"","tlshash":"fb5196d0bbf7797d65328029a4aa9c104322c007d378cbb9facda2f64f9964154e3376","size":3075,"data":"","first_seen":"2026-03-12T16:55:22.804223Z","last_seen":"2026-04-15T05:45:13.286903Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/ExchangeController-66fe4177.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8ece541558d1cfe3bbeb5d8fb963eea5","sha1":"0ac08983e14232d9e44be93da349f733d71935ee","sha256":"a661fb2f90f3b4cb26b0e1e2d1c55d750eee336cdc4aa4b6f0642ba6e5343800","sha512":"a33fd7000850094497467ce746958f79f66f790bca9ea329b0fd368b9db809a025b61b787a893988cf4e32f8f54170c3c1a000ba5b0ba8a520f8f26099d84fc9","ssdeep":"96:RvPMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvPM1gE2k+1ei+NFnopzo2Vvh","tlshash":"e5a19600b0f2703396d929a025752520cb6d4fe9a467c5d5dbec0ea66980eabca3ce34","size":4729,"data":"","first_seen":"2026-03-12T16:55:22.810504Z","last_seen":"2026-04-15T05:45:13.324871Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-0944fcc2.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b32e02ff4612b55b84ae058268999916","sha1":"fad1adda138cdd7a63f8b54fc5576a0b2c4de283","sha256":"56a4f536e7bac1aabea2a016ff2595143fde4eafdc144794c87b3b7627d094a9","sha512":"0158731a385a91437b2954c923e2ba10addba9667c668ee7cac6b0bf040218d12fdd15d274aeea7f3128c8684fde19b4cfdf7da08d1f2463db9e837ecf01d7a7","ssdeep":"96:wZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:wZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"ded1b5bf3d666415a632c0a58b928c04d131901757088c79b7fd19a8cfcea89766f764","size":6571,"data":"","first_seen":"2026-03-12T16:55:22.837675Z","last_seen":"2026-04-15T05:45:13.382489Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhX-3214edf4.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","size":2498,"data":"","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-04-15T05:45:13.333412Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html#/Home","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-04-17T12:26:03.116419Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-8e60d136.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"64e87bcb6c2688f973f5ae740a407f74","sha1":"de592c129157d3cdc56d8d60eb5f363fc4545f73","sha256":"3161d739b5ddefe4b38ffb35b5443064de5a6080b5bc22045521b6df70438dcc","sha512":"56703fbc95be389a33a6dad1b1ce85c0043a7974f780d32456b7f750046f34082ed4fa95ed9c1ac2227734f2f54b5cea36c191b8d44bc71f0e8b17dc7dd44a15","ssdeep":"","tlshash":"aa21658417bb7295b5576189463c4b06d23240539a1ccf3d73dd76e48f5c1c988bb324","size":1270,"data":"","first_seen":"2026-03-12T16:55:22.846803Z","last_seen":"2026-04-15T05:45:13.383855Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/SwapController-32be55a1.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"27174423065a5660bb1fef9d0b994425","sha1":"ca09f76058db9c415401a7b0926d808111c87213","sha256":"8fc76e2362edf3ab52ddfbe58d162f85db5558ad6e46165e410984cd80f9a060","sha512":"a37588f0e3bd281d08df9b5fed49f842293d3757daa692c25f4a2a926d91e564e87af8e4c069b982c84421c3130a4c331684b8922a3c082f4650d28cf8669556","ssdeep":"384:Nd0FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:/0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"595264a27360b676471e729879f9131025221cd4e86ef4ece8ad05e30ff159f1eeb921","size":13816,"data":"","first_seen":"2026-03-12T16:55:22.800162Z","last_seen":"2026-04-15T05:45:13.299618Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhX-3214edf4.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9c2\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45dxaLptNNuNeLSPiwECu7hHVGtddn2QH%2FTqR8kODkWKoORzJx3YZNAJTVRho6qx%2Fvc0M04kdzRKVG43YDOv5U9%2FC53YPBipQ8pQ%2BoluV2qIuZjr6S9DittV%2Bb%2FDQuHURyGhhtLVVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa3c7f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-04-15T05:45:13.333412Z","times_seen":25,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhCheck-1cb2a956.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-83e\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOa2pwiBJ2wk31f4eM4PCpVMEBieO8cozYoCEY83N%2FwEJo1duzqUfrV%2FFOAj%2F4Xd5UGelW9T2y376oGqSaGpT4yqsdxvRszUMtN3YbFddfE1gIcnbahr8mSxy6QGEPb5tYta91WWGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa4c8056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-04-15T05:45:13.307598Z","times_seen":25,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-ad0cf90b.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-ad0cf90b.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c1d\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9byLPlbG1QCbkj%2F20L0T0V2gMRrDVABYkkH4NM6urPb1ds8Zih7b52kNQrZJkBRmH%2B34EJi%2FOcRaLNHbECq%2BiRXa%2Bi2vf0zN8KKLl7v7bWF3OM9Op9R5u1u%2BXKz3GwIh9yF6PYP5Ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ddbb256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"cda56e760bd25cfb758c254f2141c161","sha1":"1b0146e385cd09be690f8c1a7effe6addedb10a9","sha256":"99e8dc7c9dcd87b36f9295d175c89a4c762cd902b1901f7b4de4aeec121b24c6","sha512":"3eb32cca620e4e7da07411329fb966ccfecf48ff181f8a34d26a2f766c96a780bad617a2bacc3877d1e357650fc432290d4eb11f784d97a705a532479e486491","ssdeep":"","tlshash":"db516221f042ae3cf3b750652098784865410fa899646af7b1ee5e0f23d9d726b9f738","first_seen":"2026-03-12T16:55:22.842075Z","last_seen":"2026-04-15T05:45:13.308718Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-6857c7ca.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-6857c7ca.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bdc\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qs6P2Osn3XZ%2FRssFeZ8VuGV1HjfuAk5i0F%2B0NfXcRzLsINjyVD%2FN3XlIqNmxhl4P17xAi%2Bv3nNclCe7S10CriTK1Qy4Qd8zowXlTwZ8hNP4ge6X4qt3IUDnZmtUpCAkn3p73HvH34g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f3bd556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"861c6afe3395c6a9378ea840dead57f1","sha1":"cafb73158459679a27d00e420c15c65bab9335e9","sha256":"4645a9a90ce3679e043ce519f5eaa0092397bc7acf57eeedb4d225bf8863877b","sha512":"ab76ec9a16f5adf8de00af6c2674f0b0716d80d6f8cb582a23231cec865c0d30fe7810d5fba313d65238cd473589b10559dc60846459cbe79da430a3cda1d309","ssdeep":"","tlshash":"30515484a6a6581e520790adc7bf4c01973ae41fd029cafeb6dc90f54fba98115ba331","first_seen":"2026-03-12T16:55:22.801817Z","last_seen":"2026-04-15T05:45:13.3107Z","times_seen":7,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-0944fcc2.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-0944fcc2.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19ab\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIGFGhYdNfYSYX6OOyAsol4sfhHFd%2B1ysfpoYM4IeFxUUFNAE%2BtfOYrMy%2BifvImsiFKaXWiWDd7l15BLRR2vS%2B8CW3tQfFRwewRTy1qOB%2F3R%2FM3Uk4%2F%2BaufT3GinFjjS0RbDzXSDEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4bde56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"b32e02ff4612b55b84ae058268999916","sha1":"fad1adda138cdd7a63f8b54fc5576a0b2c4de283","sha256":"56a4f536e7bac1aabea2a016ff2595143fde4eafdc144794c87b3b7627d094a9","sha512":"0158731a385a91437b2954c923e2ba10addba9667c668ee7cac6b0bf040218d12fdd15d274aeea7f3128c8684fde19b4cfdf7da08d1f2463db9e837ecf01d7a7","ssdeep":"96:wZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:wZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"ded1b5bf3d666415a632c0a58b928c04d131901757088c79b7fd19a8cfcea89766f764","first_seen":"2026-03-12T16:55:22.837675Z","last_seen":"2026-04-15T05:45:13.382489Z","times_seen":7,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-8e60d136.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-8e60d136.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4f6\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMKYdYeQNI8rrXxQwY4R25Ze9WGryox1uiRakI5iRNXfH%2BcG37qEv1saYmVwY5JSbfavb4uyDERLZzppJlgumPheIvpb1HYwKdJusvQjqdLK1L61I8c6u0xTc6BdmxZtB7RUpNdmnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c0e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"64e87bcb6c2688f973f5ae740a407f74","sha1":"de592c129157d3cdc56d8d60eb5f363fc4545f73","sha256":"3161d739b5ddefe4b38ffb35b5443064de5a6080b5bc22045521b6df70438dcc","sha512":"56703fbc95be389a33a6dad1b1ce85c0043a7974f780d32456b7f750046f34082ed4fa95ed9c1ac2227734f2f54b5cea36c191b8d44bc71f0e8b17dc7dd44a15","ssdeep":"","tlshash":"aa21658417bb7295b5576189463c4b06d23240539a1ccf3d73dd76e48f5c1c988bb324","first_seen":"2026-03-12T16:55:22.846803Z","last_seen":"2026-04-15T05:45:13.383855Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dash.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dash.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: FHw8bhVNfiB2U7ifVnFk0OjKie2v+JFHzt5Ig/0OWYUNTAM5560JJJ2dqd/uys3B4SF2Pd8SY5ZwBpLf6ARROqMqjgAVXXIB\r\nx-amz-request-id: X7PAV84PTVF795SF\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:51:50 GMT\r\nETag: \"65a223e39f3e4109a0d075b4830b722a\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 784\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":784,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65a223e39f3e4109a0d075b4830b722a","sha1":"163ae20edec31bf268f68038068a56c448b7a90f","sha256":"d4cf11f951e3c5d210c9fe090e9121ebef2643dbcf16e45b646e128c4a6840f1","sha512":"f1a2d53918b67997f5ae64693550f5dd01e3ccaad852ed9797eed7f8a63a4c0a241735a0e06e35edc67bba8cf2932213874054bb39765599be40d7cc3ba79367","ssdeep":"","tlshash":"1001f1aca7f5d130f708d36c2a8cf8bd39a231766b778508c6556b0c934861e8a69c76","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-04-15T05:45:13.38525Z","times_seen":134,"resource_available":false,"data":null}},"time_used":1779,"timings":{"blocked":1490,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhInfo-6eb82573.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-ad8\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0QkMshjSJNG2fHiJbzSsdOw4MVdMuIoANlmrnyAjagkkF%2BEm%2BInb2fAKUrooCXdCEjrm01BsgxafZSbQ5cFdXz6f%2BHsSOCjvf3R%2BF%2Bc6EEcKJfNApJj%2FL6XuCzxDHeihW4RlCp3ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa4c8256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-04-15T05:45:13.352344Z","times_seen":25,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dot.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dot.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yqVd94SasrmUu8ES7OdWS0yEeQ8lxXKHw+wJP/MdvYymBXOva4UwnFaRfjkjV3Eu6QOXPx3JIxoGg8dg0+SctODIom4P0LlK\r\nx-amz-request-id: 4MVDDCSW3FKE18SD\r\nDate: Wed, 15 Apr 2026 05:27:34 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:58:32 GMT\r\nETag: \"ecbeee3b982b8166e9b11ef7f85a9bdc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbeee3b982b8166e9b11ef7f85a9bdc","sha1":"79c69d70b46af0d2eb0447096fb9ef48873d24b0","sha256":"2d212db8dacb8164a85eec84c39038a4013d398d1fdbc680399c260a013f52a5","sha512":"6a47534c5310fbded78567b1860c94d6bd07e2e186fd7fb5057431d45b5fc80f580fc6ba4a5782e034243d2c9f1f47dc732dfab74551fc14f52b0a40e11b9472","ssdeep":"","tlshash":"d6518591b339d2b8b005f7fe023a6cb1ab926de27e33c5a55bd60c14d04740d8a925f7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-04-16T01:47:52.162859Z","times_seen":706,"resource_available":false,"data":null}},"time_used":2053,"timings":{"blocked":1762,"dns":0,"connect":0,"send":0,"wait":290,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9ec88aa67e9223eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-04-19T08:38:14.439132Z","times_seen":306,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":45,"receive":1,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a9b5a56a.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-a9b5a56a.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1b23\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpXts1ebjS8t9Uyg6VIqkjtfbUuJaP1wdQmQ%2FAd27ZcMxSDm6XCG2RQot70LNqkZHMEdI08FuzP03gUEr0g%2BrE4Qnu5M9%2FJm7qb7QI9Nl%2FW4Tie8OPRAnqdHIe17CJu6mcjABt%2BKnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b2b9656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"15be76634ddc9d89e12f0471155339c8","sha1":"19960fe52cbc474168b5988c1c9d297e0e49a541","sha256":"79793f4295cfc478fd637b15d8abba228aca5a352981efb88c20bfa1cb6ae805","sha512":"6324b3662800c0c39853e4334a01e8aba6d52c63707f3cfd11873fcace34e311f8e580ef6feea25a7e53a479fe766b891ec2649dac5396b900e44608bca2156e","ssdeep":"192:rDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:rDEIRRuUCL5dmVp","tlshash":"27e1b601ba296e3cf73b84582406529561d09f59ea30c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-03-12T16:55:22.830914Z","last_seen":"2026-04-15T05:45:13.277003Z","times_seen":7,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-ddb31605.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-ddb31605.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-716\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ViG%2BDEsI828BPNC3aCCoKP8%2FyVzjcY%2BWT2%2F9RgoyeSeRzojTQrl6OYmLbEVuqzCxQirMbq0vYyyhZoOlsRxlGpor4iS5NFdBnf2cVvqTbbZanUMTZh4asuOVc1vresWKBZ7I1BiSfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9dcbae56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"01e180ccd3a6abc71fac9bb289ec4f02","sha1":"58ab965eb4025e21aa492a23bc3818bb463ea66e","sha256":"776ea42996263432291bbd28400bf5b5a72debbf92e503e64a544940bd551187","sha512":"71d9748d7232ddbee0751e6b55b7572239f72d3aa911de9ac5911946252af128dc4617533705ab524c4f7370f9bd07b5d5babbe38417ba2a069ca3c291c0c988","ssdeep":"","tlshash":"d83185c2f1db2579b37adcaac0984461d23c0949f50097e6f17f5c1a2b601c0bf5ab18","first_seen":"2026-03-12T16:55:22.823313Z","last_seen":"2026-04-15T05:45:13.314817Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/send-e4234d39.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/send-e4234d39.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-8337\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqd4qjKfA2L81am5y4Rg76DZreO52W%2FO478NsUJJlyU5XfgF1sSko01fK2kcC62T9hOmNRzuhYQ4LGRfX0fUlCyIDkHGug8G9EGw%2FrJh9COobQMSIQ4FzdRGJ%2FDtOayTCKfa%2FDSGLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ebbba56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"44b0d2cd2bf6d091e7b13fc924369cca","sha1":"725001ffd2ec2989639a2c4dc36c656824eef75c","sha256":"a5e863d9306830012a0cc970d42c4cfa3c8108a9d4a0ba04221defcde4b97e87","sha512":"bbb82337a19f5c87de1e01bdf19b145c3dff823616d985f2dd67c7e5bffdd235ebe5242ba11f3316e6db5fca413734c7861c2b764a4b29344d7b794a2fe1cdef","ssdeep":"768:oaYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:zYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"03e2e89433fa281d29a7516dead69e006331501b811cc5fdfaeca2f18fa9e4248f7734","first_seen":"2026-03-12T16:55:22.815337Z","last_seen":"2026-04-15T05:45:13.312545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a5a83fe8.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-a5a83fe8.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bc7\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueUxX3%2BmDyqt63RssTyGh%2Flqnaxhxe%2FrPdtti9b%2BbgtMuQ%2FMVGV3K7a%2BjnMja4BFCz3pytIo61QnUXJBL4JYAEtngDuPBC1GtWgZZXxqzvfyuzADznDEDzi5IFcjEQfOfRbgq217UA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9eebc456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"fd28098fd42abb3e7c53052d0b7289e0","sha1":"83083e9919a8e4f75d03ee936c768b565190dc6a","sha256":"e7c4eabd860022c67d07d45a2e1f96ddbdf5b329315fcc1f0ad1fbb429d95913","sha512":"7e4be44e3aaca0093f2b141a6a626c45a0aaf441d4dddcba1bcc926f25d59401cd72680e3333cd1cbba730b494dcfaa34cf71d8e9604aa8cbd897be50603bf8a","ssdeep":"","tlshash":"71511188bfb43d63371bc065f0ae8521e335a03a9c1c9e3e739d52f84f69682555d932","first_seen":"2026-03-12T16:55:22.849579Z","last_seen":"2026-04-15T05:45:13.281334Z","times_seen":7,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-fc6d5a31.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-fc6d5a31.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1008\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sF2vpu%2BgWuHpK7KRvZebHwBwG7NWpLe8%2FQ13O62lKnVz2Od%2FPjbvKSAcmt1QxfYAFqtLnytkzIEK3VZ2bZCMAy7QItm3qU%2FUJe8MRZ2ZaMtFCBAKrJUM6A38Ia3%2BCDf%2BMnmomXF4Pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c1056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"3e1006835216683dc17e7b93a2b97ad8","sha1":"c486940c30ff8b9f716697ac8da66ae85be7be7b","sha256":"2cd22ea99865c65f65fc2aa037057dd1809df32cc0c6eaa9bfa937be197bcd5b","sha512":"476eff1023d4174f2900ac7a40a1b3598feaa34e5d50369adb226e7c66cfbab81dd7aa77f07ab2a9bbe29f138ef8f0314fb17a213422f94c94f669e8e0d1fd5e","ssdeep":"96:1JPHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1VHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"1881c5857330d912251e8a6867fb8206373a50274225c4fcb6cd9af84fbfe459b75b70","first_seen":"2026-03-12T16:55:22.824614Z","last_seen":"2026-04-15T05:45:13.298616Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-c24422b6.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-c24422b6.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c03\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98P2yUpDr%2BF4ki6bDZa3uxqMarX70dQk5BwBOjjuc6ziDg7GiOGzS8Lrr9aj2j2TedBgFcHAX6kiZwkYne9CB0KEP42IRCzxvXJvS6VrMWILiz428H%2BmDD3%2FW0LyVvJVJFT4gRSZiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c1556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"62c5cce2d8883f65cb2bb22412ad4452","sha1":"701a9c740954d6e33658fdc7bdd24dca5f9aa14e","sha256":"2c00853f4d1bbf86ac33682faaacb87d60fed67ba4ffe78305ed41dd497a422e","sha512":"687e8931ac7e355e7460dbaaa828e09ed28aa9c624e03975fd52e13b31021681ad8210ee294dd957f83f50d005cee5143d4be2993475f2fdb652d4fe1868cef5","ssdeep":"","tlshash":"fb5196d0bbf7797d65328029a4aa9c104322c007d378cbb9facda2f64f9964154e3376","first_seen":"2026-03-12T16:55:22.804223Z","last_seen":"2026-04-15T05:45:13.286903Z","times_seen":7,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-7cf1ad98.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-7cf1ad98.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-18a9\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uoh9jGGpcXVDaeruX3G6kdSoB5jgHfPNd5uZVMbBRyHqlWGkbpx4Xs7V%2Bp3GpjLKuvZxBVN%2BbrW8KcmJzALdc50HkFvJ9nCks6ofOXGaDjDD58Ew5TpUAT%2FwhyqzKEaR1%2F1UxjAnJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f0bc956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"69386e19d1259595921129156676e7eb","sha1":"57b44a4c9162e3bc65a45d86cad67af07998b0b9","sha256":"4f18a271ad4bd5e36ae65ad8941a7d278baac94681964b6575ae3a6a7a05ec33","sha512":"bf6b0c740470e63a2457dd8362a352cf4fd5ccde66a1fd8496fa50e400cb4bd06d24155a8db87f362b321ecf40288d744041d532db3c512950e4fa6a84fb7351","ssdeep":"96:Fi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Fi0K9+N+DF5si6SJHG","tlshash":"6bd12fd13e756e041523c939a7ae9d49e331a037c83989be77cc91e08f9da405aadb31","first_seen":"2026-03-12T16:55:22.843738Z","last_seen":"2026-04-15T05:45:13.368187Z","times_seen":7,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a1ade1fc.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-a1ade1fc.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-42e1\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qipCX4M%2FQYr7JdpcxcOxir0nGOpsWGCZ2TVar38JBD4KYa3rXNkAsUMtqkd4J2IvS4PMMQNfCfhSU8n1YaL1xqAckNlH%2F0Fwy04Afr2LrYpcRYyJnORVOEhTOOVQqSCl5%2BfW3rPL%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f1bd056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"afbd5b4f8e7f8b2912972faea3330203","sha1":"7f14c7ce2c7d70e5dd677a5faf04d1a57dce0553","sha256":"08c1d3313dd2f22dd0a9dac24efd7cc641e2ab3e0a38378ab2e15f358f5aed21","sha512":"95c04b7b6bf21ea096f5ec6c16d01a33e563c1e05315709393b25feffa6bc62b32d524756c5b315fcee364bb2c6026f6a4f842e884ae1ec6cc482d075646112a","ssdeep":"192:QBhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:Q0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"1672a7ac3693bb28a9875bec26f55150f6343812442ed5bdb6ddc3e28f16a844cb2371","first_seen":"2026-03-12T16:55:22.825409Z","last_seen":"2026-04-15T05:45:13.379612Z","times_seen":7,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-5c39d86c.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-5c39d86c.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1046\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijgExq1A0D7ETaSasmJ%2FOmuS5OKOSXUNe70WKXTz5BhCBulPTh3zbg3BeAydzOmoyWyOdkBd8ZFMiNw6oENbqxbPMyi0bOGYzMy6AVuufoJU5oAzg1jloM9Yh77Ma%2BpyfgGNoQy7%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f5be556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"31defc23a8a751eb880853e554c09c0e","sha1":"86f03041519abcd79610a36d9f0ded8cced111c1","sha256":"2a714fe6cf782f103d614ef3279efb4aae1b9ba2f39eefb999b072e749babba6","sha512":"594bceb6eb2a4399c18ace486d020101d6b75f27654437227c0a140a3272df8ea3aa0b9b67a45b100fb3e3d2edb2d2c15cba86047f14f9ae923a8a2fc84b70ee","ssdeep":"48:qAhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:dCgEQM0o8hJwisSPjgZDIKL","tlshash":"d58116c57fa815e53713c060aa9e4c25e331a027a8299f6e7addb0f88f55643781d373","first_seen":"2026-03-12T16:55:22.828645Z","last_seen":"2026-04-15T05:45:13.358352Z","times_seen":7,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\ncf-ray: 9ec88aa97ef3569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 84275\r\ncache-control: public, max-age=31536000\r\netag: \"cfVAcZ3w6iX14DvHKhBFs4CgkyfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:32 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=13+10 c=5+4 v=2026.4.0 l=1318 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-04-19T08:38:14.499817Z","times_seen":560,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/property-6708c68b.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4547\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDfZ4Wfdr1l3MOGgUkZKFL4CbvQB%2Fql%2Bt8AdeduEeKq4CwTVkf1mXi0ox%2B473l6sTGTNjKRaqKoVPgb618alBimOZueE98GVTRL4O%2BUW7VeDBtn3N5V1Q6UAthK51Xpa6Fv0YDliMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa2c7b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-04-15T05:45:13.317839Z","times_seen":25,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-500545c0.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-500545c0.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-dc69\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrs%2FU7nEcqmFySgQBXhmXsvRXTcr%2F6Mg73BytMhnJUwpeNAtzoj6byLCt28UmJnacvkl%2Fx98zOczPx3lQXTQN30BsFic0PzL%2Fln4Fzg%2F3ryrSsiAP1d6KOjFYmvHw5HFebzVEqIdeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ebbbb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"de35a8a60a9117e3cf0b29cc71f26838","sha1":"4615b88938ffbad2a0ef2744acf383cd8838ffa4","sha256":"fc996c43f3b0f20eb4d724f9c7af53fbdd66b800bcab392b690e9e32649f49c4","sha512":"ad4c41b71223bcc0bbfb7dbfd06e4ecc8ff4e29f6cabb8e55589666304ae61e1fd4634545f444269891a91a2190ffd87be9777a962339e877568a0ea8718f151","ssdeep":"768:ElYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:fAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"ce431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-03-12T16:55:22.854707Z","last_seen":"2026-04-15T05:45:13.326294Z","times_seen":7,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1107c1b3.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-1107c1b3.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bcf\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3q7RuHbBR5wuRk8XOy%2FF7DlcUeZc3ku9HkytkA3lp2fGlxYmiJYgxuh2F50A%2Bodycnfa%2Fnpri2eRxqwvgSdRJ%2Bl8TCr37KhxUvnQdVIUSG5z11BFT4ifeOpoHaM5ciDIM%2FvPxZ2Qqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f3bd356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"6510b61fb435b11e269b698dbf41a2a5","sha1":"d4484c8f930015cf050f7f8fc3429eb2878e4284","sha256":"fdec41b69bcf830b6339ba7062b12ae3064ce044a475e2de2cae3fcfe37e78c0","sha512":"e40fdb466a63aad6a911a28ec628f818e81a969a319482c1a120e6db9a5198a3b41cb51cebf4c7072b0070ce4f05f2c6984ed35e8d7162ea1d34fae4325baa17","ssdeep":"","tlshash":"9951b8d7b33a1176385592941eae4ee05233e01ba11cde3ebbcea1f84f461855c36632","first_seen":"2026-03-12T16:55:22.801034Z","last_seen":"2026-04-15T05:45:13.315655Z","times_seen":7,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-25e9e0d3.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-25e9e0d3.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-774\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mURPfjeJHoEGgx%2Bed6SOgHFVYNU7DX3vTciiyOPUxHxhdoWyu87muuVTVUdc527qGDO8pehkNciUAZnEmS2ag1VkwaRO17RSDKTxBVIdAF6xROl4eLz%2FxpeyaGGkR%2FfLzQrhd36vgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4bd856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"2a17a65675aae9c1402fa1dd8503ac6c","sha1":"2af0e6c7aae04538344e4846fcb14cfe677befb0","sha256":"ee425f7d56b3c1b5f4b1f7a0e87f2100fff5d820fb87f779c00aa3462c396517","sha512":"63efe203a698a4d4d2e12dc1a422ec0e3c99972e3f439151ac3c8e798a7cabcd37d0f7a8e3dca4973c7c5025b000caba735c3a3cbc74d4f88b3b5f0deaf0dcac","ssdeep":"","tlshash":"0241a4442268bab600c466d6c0968a405121002c590bc194b7fcb5e29faeacdceaf73a","first_seen":"2026-03-12T16:55:22.88049Z","last_seen":"2026-04-15T05:45:13.285313Z","times_seen":7,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-6c9cef39.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-6c9cef39.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-104d\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaYnQQ3mpUF7pBDa9rG1NO754NGo2mSezigidodEUPP7D5LjZiGNeh5qyYBW9X%2FONbtqsLkdkW7LEnU7YM%2FadBENR23OFiXdSaxK3BRJx%2F5qBbR%2B%2FEGoZTgin56nBfGhYLzDeSVNWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4be056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"3dc3c4f44f473fb0a351fdb36531de8e","sha1":"57cce8b649feb62e9aff2d79818934d8f19e359a","sha256":"0681ad2b343ebadfe5203e239adc5fbbf0a8d2ef03c688bc0dc658e6b67456cb","sha512":"0c35fc6a6de7dd34c77ad9977eeb608caf90fc7cdaab09fd9168e412c05b4bd22318cc1be53e53a26ccbc7a3f34481b88738f424422674c83956cd00bea347a8","ssdeep":"96:U5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"f981c864b37d217a79c390588d366d01d334401ad11ec9a07bdca0a78faa2ca9db7771","first_seen":"2026-03-12T16:55:22.80659Z","last_seen":"2026-04-15T05:45:13.311649Z","times_seen":7,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9d24c88f.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-9d24c88f.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1363\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PlbmbrQ2D4FhwfuuY8m7Zm%2Fz%2Bv9k0O%2BxJPWD8D9DLkpv%2F9aw8um4FSPhhibIfu4nAlkzPvYjIDGJN2NHQRwvGhEgCk%2FzPY7ZhQE1u1CrsMC%2BtWN%2F8MAiGe4nJCYIMoOaHeqiXknpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa2bc2356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"c96bb322f6b946e216e9b7196dd940dd","sha1":"b4ba324d2c9e4b3310c3abfe32b3584e68a3838b","sha256":"748da57ce1edeaf713b242f2f378a28c3eda62c06b8afd5533342ba5e5d9f29b","sha512":"3b8a3f2471c58af71b87a85812c6f4d69f6dfd3f82e7a93cc16c77fc367b2e00d1d243fb38cf2aecec6fb5293c9802e56d95380077ad16fb7a805d0d034b16d6","ssdeep":"96:0jZJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0FJTFyhlqTsd9fTOsy6Xd","tlshash":"dca1a7a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fbd084d4df299","first_seen":"2026-03-12T16:55:22.863037Z","last_seen":"2026-04-15T05:45:13.346744Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kBHAal9J1BPkTqdqLozgckxr/h7x0gPOp8nlEq2Qsqokl34Iux/HRdtf4Cj462YvoIKDSac289B7aiqOUOwsx40ISbm7lXyM\r\nx-amz-request-id: X7PBXJ9T5TGMPS4F\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-04-16T01:47:52.129622Z","times_seen":205,"resource_available":false,"data":null}},"time_used":1797,"timings":{"blocked":1498,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 910\r\ncf-ray: 9ec88aa97ef8569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 80810\r\ncache-control: public, max-age=31536000\r\netag: \"cfmeYviP6kCNFgjEWLRBgPUJnDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:32 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=528+3 c=0+2 v=2026.4.0 l=910 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-04-15T07:13:33.475161Z","times_seen":518,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/if-defined-39ff01ec.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/if-defined-39ff01ec.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69af4728-a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llHP87uOOsLabi0YGivFAZpH7MNz8XF1tci%2FGCMJ%2FlQkpVUZT8pVK0f3FfIUzBp2f9%2B7ySg2BzQj9oEmwcEPCsw%2BjhBUH2Wr8C8EM5lTsFG27Rq%2FUT1LGIvM%2FPPn0bUearyzuco5tQ%3D%3D\"}]}\r\ncf-ray: 9ec88a9edbc056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3eaeda4a4879e8acad1735fb4ccddd26","sha1":"76bebef49b1e07d9e23f7986d5585aa5f68cf2f0","sha256":"e283c993d87fdea0d861cbbe0f8d02c57ef0b02b6ccc41ac5acaad8589bd7858","sha512":"f332fc370abf5c75fc6637fc1c35e2875dae57cf0c777d829757045d6232ffb41bb0c6b8b52610ea43f08dac2fe5f21a1440e8df99bcfbe12a46b8841676e6b0","ssdeep":"","tlshash":"20c08c12a82901e34cda038ee864cd4e5020326e5f524282b0a8234688321805a9ec16","first_seen":"2026-03-12T16:55:22.81621Z","last_seen":"2026-04-15T05:45:13.309752Z","times_seen":7,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a5a83fe8.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-a5a83fe8.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bc7\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcpQnO%2FR6nRLkgkwQ7d%2BO%2Bg8idZ%2Fq7JUJvf%2F5BBxzKL6lKohfI%2BoaHERKr4PAcji5P4XMlW%2F6pNKhPNZh8CregoT7MYyX3QKP1lUeUZUU5stAco7hjQZPFRZMPCi%2FjxsMzv1qJeAYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c1156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"fd28098fd42abb3e7c53052d0b7289e0","sha1":"83083e9919a8e4f75d03ee936c768b565190dc6a","sha256":"e7c4eabd860022c67d07d45a2e1f96ddbdf5b329315fcc1f0ad1fbb429d95913","sha512":"7e4be44e3aaca0093f2b141a6a626c45a0aaf441d4dddcba1bcc926f25d59401cd72680e3333cd1cbba730b494dcfaa34cf71d8e9604aa8cbd897be50603bf8a","ssdeep":"","tlshash":"71511188bfb43d63371bc065f0ae8521e335a03a9c1c9e3e739d52f84f69682555d932","first_seen":"2026-03-12T16:55:22.849579Z","last_seen":"2026-04-15T05:45:13.281334Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: EN+Xa/6E43/uH7aeo1JAded2jXXbEimBsabOG6pn81czLptsNL3u0qyjfXNlot26R6yF0ch3TdGNpZh/LZBvTNloIFVBxfTg\r\nx-amz-request-id: X7P488QYEGPPWVRH\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-04-18T15:16:20.96673Z","times_seen":460,"resource_available":false,"data":null}},"time_used":2758,"timings":{"blocked":1233,"dns":5,"connect":261,"send":0,"wait":293,"receive":1,"ssl":960},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-6857c7ca.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-6857c7ca.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bdc\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULfIzgi0X6eyfCKh24eNzwJ8IqQ97IwPH1AXIwFM3gaEYa5zZCG0pZwds%2B01LGON08%2B3TiQIqGy5xMa5HiDW%2BInbVvBIdFDjro17qTicTDSqWgVonknkXBo%2B1nCgZ3VljRQT0P1G2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa48c5656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"861c6afe3395c6a9378ea840dead57f1","sha1":"cafb73158459679a27d00e420c15c65bab9335e9","sha256":"4645a9a90ce3679e043ce519f5eaa0092397bc7acf57eeedb4d225bf8863877b","sha512":"ab76ec9a16f5adf8de00af6c2674f0b0716d80d6f8cb582a23231cec865c0d30fe7810d5fba313d65238cd473589b10559dc60846459cbe79da430a3cda1d309","ssdeep":"","tlshash":"30515484a6a6581e520790adc7bf4c01973ae41fd029cafeb6dc90f54fba98115ba331","first_seen":"2026-03-12T16:55:22.801817Z","last_seen":"2026-04-15T05:45:13.3107Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9a6a5dc9.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-9a6a5dc9.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-593\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkNM21dYG3MnqUckZtVZJyTfzUcE81gB2gWqpzAFfjyVSU7VxA6Q8zebDpDgTZV3wTCOSgUD00X0g%2BSMbN5MfUZedxRFRbApzhkfypn9uRhze0fWfV0mVoYl1PUnzAWqof6XDaRFHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f5be156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"b2c0a0cc945cb89cf466022af34f1e53","sha1":"09ccfd82eb75e2590f2ffa1fed3b7786c218fd3c","sha256":"6003c01736f7d50718c5c287059f788474debe9d23b75849215ada0e5c968a6f","sha512":"ea033598e556b3caec8382125d4ade834c0e72e7d48d9627dc63ed4c20d9542afc9451e7291fe9b6588a6afff5972924b99bbf259877c323561682ff923d72eb","ssdeep":"","tlshash":"e62183c9276acaf0896140768f25350132376007972fda86b6de7aa48f0c5c58a6a7bd","first_seen":"2026-03-12T16:55:22.807481Z","last_seen":"2026-04-15T05:45:13.303589Z","times_seen":7,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/v1/api/exchange/getSymbolConfig","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAtIvhsO%2BdkpADOI6fGS8mZL0%2BWrvF2s6ywExOf90IM80t%2BYD0fB6URi9a%2BkkgtGpBp6ks9%2FqFufnSuXAlgkIaaIW0CxD8Z6hdAYJbE7CAcNFzOKb%2FDIcXeTiw9ipQ3wPvzlJDnwXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f8bed56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7874,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"33df57e14500abe7073ea8e821b11f01","sha1":"dbd03d947008a341cff94ffac90864149f1297cf","sha256":"7e8c36aba4ea752bf3bc8d658caa2191c72c739a0408d3485fc3615ab962c004","sha512":"53ac3e81523d047944aca3b74a57db0fc7c25309aaaa1f7c83c7e73ea7da0656145b078e9ff52051703f437bb8c285abe8dea8b4f3b7dff077078173a71e528b","ssdeep":"192:pHI5djZ1rllBIDHSamnzXSw0mBvnS5JeznE:G1xF2fIlE","tlshash":"8cf1b80567211bafc221a1c21cd23bdc556f26962cd61b82e5ff9d9e8358def3123722","first_seen":"2026-04-15T05:27:57.214081Z","last_seen":"2026-04-15T05:27:57.214081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/SwapController-32be55a1.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/SwapController-32be55a1.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-35f8\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qr0aRHxfyCpQjtWMPK9tfk40PfvIzsGtDARnziV%2BbXvS%2F8YWXw0gMm%2Bs%2BkdGOGfBrGlJtDRIH0ajsBWBnYzCrSfko93cg929Ep0UStTgCR98990WYEB3AhedUsCKKjKJ5y0WCON4GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c1356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"27174423065a5660bb1fef9d0b994425","sha1":"ca09f76058db9c415401a7b0926d808111c87213","sha256":"8fc76e2362edf3ab52ddfbe58d162f85db5558ad6e46165e410984cd80f9a060","sha512":"a37588f0e3bd281d08df9b5fed49f842293d3757daa692c25f4a2a926d91e564e87af8e4c069b982c84421c3130a4c331684b8922a3c082f4650d28cf8669556","ssdeep":"384:Nd0FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:/0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"595264a27360b676471e729879f9131025221cd4e86ef4ece8ad05e30ff159f1eeb921","first_seen":"2026-03-12T16:55:22.800162Z","last_seen":"2026-04-15T05:45:13.299618Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bch.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bch.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vIKyHEC5WU0DNsOcWwL9lXnCCX6sHE8gAVA7D1OJBw7KNQvnEkcQB3XG6Hd1bETO0RsTkF8IHH7sIyyIfoSl+PA9uFOd7w/1\r\nx-amz-request-id: X7P39SM2RFWDN0WN\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:30:25 GMT\r\nETag: \"a62c25ec1acb1fc3718098578b388808\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1953\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62c25ec1acb1fc3718098578b388808","sha1":"5ca0181b69511c10a14f3927fec31a9ceb00f067","sha256":"d600c9ea66bcc09bb7c8462506b8946cf3afe92cb717ee86ee2d660a154653d7","sha512":"4fdc1adf49350c2f5362f58b469651a926221e7b642292f672a7bb25de1ed25a4e26c5b709fbc4232d3a03d9b19681a8e24b13d92a009b295f79231e3a90709d","ssdeep":"","tlshash":"ae412e60b3aa557df410d3f88a2da0b17e733c823c25d10e9af60929a66181da030cc7","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-04-16T01:47:52.144618Z","times_seen":246,"resource_available":false,"data":null}},"time_used":2729,"timings":{"blocked":1220,"dns":1,"connect":264,"send":0,"wait":288,"receive":0,"ssl":952},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ltc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ltc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8nu1RsuqTdwDFELmfUNgQfp/xk9bLxEqj664LBVU30kbgsMHuye7r1UwOaW6/w+FZi06ALnZbyIuFXk2L/1lyw12YrgqKyzQ\r\nx-amz-request-id: 4MV90BG6DRBGRM1B\r\nDate: Wed, 15 Apr 2026 05:27:34 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:04:10 GMT\r\nETag: \"b772bf1738628de70f1b9304c3d669ff\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b772bf1738628de70f1b9304c3d669ff","sha1":"db4b8dbd617a80bc2b7efcafc1b93064eb9a08bf","sha256":"9afa8bc92c0b1ed443e1b75a05bbac5399cc3a6c95863765b0d68959faf089ed","sha512":"2c54b078c370b434455c91a7a61454bc4cbc3ab611793db68dc733087aa507a280108d53977a1a47983a7161b52cea75d097c6f6bee8c529774fde42ad2c7516","ssdeep":"","tlshash":"f8f02e7df6441b35980ed634663e2cb430352fa2f245805a21dd1a547a574ea5945363","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-04-18T15:16:20.972434Z","times_seen":480,"resource_available":false,"data":null}},"time_used":2041,"timings":{"blocked":1757,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\ncf-ray: 9ec88aa6ed2e569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82740\r\ncache-control: public, max-age=31536000\r\netag: \"cfCUkmfLSHImn0WVCsJt7FCSUffmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:31 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=360+2 c=0+1 v=2026.4.0 l=374 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a12155c6bad8cc78944c7bfee468b1","sha1":"3684a6988254eeebb4ee2df16fe1d053e07995b0","sha256":"09eafc5ea66462e38244d77d3c57b5f09a16d5de53ada131c1f847ecc869887a","sha512":"cbd356e3a836732175d690418bc1e48eb99cd9d673d21ca092ed1e6d698a9b69fac87072890f892af66375dc903af2c21e29ed31408114609861c059e1e48225","ssdeep":"","tlshash":"7ee0608a2235d2000ec0fb00682b20ab92ec3554bbf30930981aeb2204a7302e342ebc","first_seen":"2025-11-29T02:31:10.911784Z","last_seen":"2026-04-15T07:13:33.673252Z","times_seen":42,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":2,"dns":16,"connect":8,"send":0,"wait":328,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1020\r\ncf-ray: 9ec88aa6dd19569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 58325\r\ncache-control: public, max-age=31536000\r\netag: \"cflmU5jeS0gZTTUT6JXX89Y_wKfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:31 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=531+2 c=1+1 v=2026.3.3 l=1020 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d08a4e1724ddbbaf3ee6372a6cc5dca","sha1":"ae18af289498c86d780f29f792e5dd1576239c87","sha256":"d1839a6158939a008a3bed2480ae5fc4a3ccc818b0bad78375758b5da90ebdae","sha512":"fcd457f698b2328da1e36faa98f33e6c5932ee3e3038d64e1fcd49cd3592ec87c57f17c4b751e258a0f2b6abb645d1ef840c73ef6d1e2bf617319faf2369d6c5","ssdeep":"","tlshash":"da11a878a4171e44e1712f1699ee33e9dd263c5648dd8133f062e6904017847a2383df","first_seen":"2025-01-22T15:25:28.962767Z","last_seen":"2026-04-19T08:38:14.468692Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-4cb28ea6.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-4cb28ea6.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-141f\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbH3g4vIqabWxPTsMwtNS9NAaSY7QkYAuTQi%2FWVoF2jIik9tdr6lJJ2LhlHvYmuC9K57NMPkuU93314pMV7ZL19KRTUG7nDMlknUWOX%2BuHLsWmqoG%2F4syZLjISimwpTHiZaneQ0DQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ddbaf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"fc565663046785c73279178fd07ee961","sha1":"432e3dd5edf33cc368847b9b160aa7bd91c20abd","sha256":"39f6d4dfe06a9415fc42e27f562fff81063da761a718a4624160b485482273fe","sha512":"188a59f70989b71c510977cadc2db23e3e72e08b527a87640d310dca088300f90bd2752f1c87502a08c55adab9c95bc2a50b3ec96db1ecf0199a440c672b966d","ssdeep":"96:vCz7IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:O8aa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"28b1a7d17190fcb7d739dacd406042e097ae57e07019c5deb15f9e03250acfc66eaa49","first_seen":"2026-03-12T16:55:22.831707Z","last_seen":"2026-04-15T05:45:13.335899Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-c28c205a.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-c28c205a.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-162c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEMZ4eLhCcjOCMCe06o4h2XqpcFoDpzs85cvCi4luPc5uMzy%2FY6QF9Uf3HdfsOzZPRQOtflM7mnx85QahCajDD8itQH1J%2BMduIYIvzGmr5lmjtQASyw2psn5YrIjO%2BE27Nq7LTjC6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ebbbc56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"40e152d7e754dc63fde36d1b623d9ce4","sha1":"fb8669015d6e5c3fc5094f46040cedf0f10865b9","sha256":"5a087037eee74c54ab329bad9bcf20e19e61e7298e9fa03b2aa7d6fcb377ea5c","sha512":"dbc3d1ca6bde2f174605de886ed7b4568d09628fcafe67fe0f353f935cb16e41caa68982f91e3236066f2b88c868dbb419a5a4d061db7f6c5fe5994e31cb2feb","ssdeep":"96:eo2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:32ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"03c144d5bdbd2e7b3517c028e16e86a4e334b0279424df3e77ac61f88f59942181c931","first_seen":"2026-03-12T16:55:22.817029Z","last_seen":"2026-04-15T05:45:13.336651Z","times_seen":7,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/HelpersUtil-2286d400.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/HelpersUtil-2286d400.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c7c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vFQahhI7AeDXN5vCdfU%2BwGbbi6NPEgvg5mKPnMHhytXVCy3N9fuFEq%2FVf1%2FyHvmOrWzTvwaTlEVp3NtEPi%2F2kF5hmZ%2F1kQRWNL2R3HcJJDlWT9jv0j%2BIofwF%2F6Vm7Ggk%2FIVWiOThg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f3bd256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"2577c54fa41a9dccc6706936ab629516","sha1":"d5105a9b203ee4b0cdc9069dd68b0544ba269bb9","sha256":"f6a93469ee23f561dd26bc93951d314f6a434acb3e9b817491ffb09bc86e262b","sha512":"eb1f2486d459eb023d8356c141554814aae7108d7c38a0fcb9c4f5d7ed3eb8f97e10c3d0f6b792af317d68e9b355411b19ac6981892d63bf01fb1bd3c97cb114","ssdeep":"","tlshash":"6c6145c5f3fe7e26350704a999adc5106336702a291e9f3e7bed53f84f0af81a856520","first_seen":"2026-03-12T16:55:22.832602Z","last_seen":"2026-04-15T05:45:13.296679Z","times_seen":7,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b7a416bb.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-b7a416bb.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f7e\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ymc0PTWI02tRu00Bzhxsp8l35%2F%2F38O0UPW6NcrrsBQB0vDOihQNiA6mFkKROZ2UlPOnkJHj2nTDnqdfSUyztV9OFpvrXYBrMMGUcBRD2bToUIT2R8WJE97N%2BKeY6ipR25FzVSAzaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4bd956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"a304de782e3a1982407450b066fc8c8b","sha1":"651ed3180e6b7355d5330f81ef5976bbf8983c1b","sha256":"4e0d04746970c0922a7dd1da94db7a8abca6a52d27b964933cd46ec4e6094542","sha512":"4421f779724a80839930c82fab6341a9202076804a4c3dfb8ef5c88e42887c27df28581ee2655d708586e4e3f5a4a865083fd83b532207e6beeed1f79a45a1ef","ssdeep":"","tlshash":"2e81969ab7771864342b42a9fbde4b245232b05e0a1bdd75f3cc12d58f48a689b4b230","first_seen":"2026-03-12T16:55:22.821582Z","last_seen":"2026-04-15T05:45:13.269973Z","times_seen":7,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-e6521786.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-e6521786.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f2b\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAaaaheSMDhSp3gwdQyrfirN03jH%2FoUZgsop1SFMyHmKwWX%2FM3kVRtTNjNUmQMSGPk1mN%2F%2FV1agAOOTDKpaR9TDBDygz2LKRpWryRg%2BToJ06QqQYVB4r4u4L9JGBNh%2BT6ADpWOsfgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4bda56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"2fbe582fe14006d7f683ecd82a35c824","sha1":"964aea3d211de25fc724b73dc6c70a544c9b7fed","sha256":"fc736fed8435ab7769dff3a886a179ee41dcc2616a1ed474469893a9f64b1f2c","sha512":"74efd46a634a762510df53544ac9fac88f97d9281e940f16c2dffbe40518c3aa29c2e18465731dc3063ea4c63ad409506979a885d5269b0a32110f162e35d1b8","ssdeep":"","tlshash":"3d81d95252bb9178a861d1e10fdf16842216943b5a18c47ebaca61f08fc72bc9839bb1","first_seen":"2026-03-12T16:55:22.851031Z","last_seen":"2026-04-15T05:45:13.330314Z","times_seen":7,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/send-e4234d39.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/send-e4234d39.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-8337\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9C%2BS80ndVioqcZ2rmqc7ZXueIfHogeiBeU4KEANuPt30x2ee4VzNd1LHaoN4J7Tytrj%2FMTiRERMo%2FjnJP4jpx%2Fvin6uYqPyr7OlPfNMRSISGK6nDHF0KpJfpgpanDTy3hZiH0jWCkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f7be956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"44b0d2cd2bf6d091e7b13fc924369cca","sha1":"725001ffd2ec2989639a2c4dc36c656824eef75c","sha256":"a5e863d9306830012a0cc970d42c4cfa3c8108a9d4a0ba04221defcde4b97e87","sha512":"bbb82337a19f5c87de1e01bdf19b145c3dff823616d985f2dd67c7e5bffdd235ebe5242ba11f3316e6db5fca413734c7861c2b764a4b29344d7b794a2fe1cdef","ssdeep":"768:oaYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:zYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"03e2e89433fa281d29a7516dead69e006331501b811cc5fdfaeca2f18fa9e4248f7734","first_seen":"2026-03-12T16:55:22.815337Z","last_seen":"2026-04-15T05:45:13.312545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhCheck-1cb2a956.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-83e\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKSQmRgMORzeDomDyALhCW%2Fo8ev3IQpuZ32SSYODZu7H%2Fh9GBzpd4OLNxgRHbdd7h9aUBlSL4mAZbnHlS%2BxKDLBFEd4kHWiir4DXc8XUpmxPsuEIH5HZtU9oWPplQjmOCChmtrvs2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa4c8356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-04-15T05:45:13.307598Z","times_seen":25,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/v1/api/exchange/getSymbolConfig","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ik6bQv4812YNN4jpXjuHy7qc%2FEJJk9dcwUzJLGGrlUVGvGOHIfUL98spkZDFBMLSnCdyzXXyDEA0fbahFd1n0yde3IUC%2F1ZRVvjgZaaZDmHulmc48BAIXozuCGWXl5t2j82yj0X7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f9bee56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7874,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"33df57e14500abe7073ea8e821b11f01","sha1":"dbd03d947008a341cff94ffac90864149f1297cf","sha256":"7e8c36aba4ea752bf3bc8d658caa2191c72c739a0408d3485fc3615ab962c004","sha512":"53ac3e81523d047944aca3b74a57db0fc7c25309aaaa1f7c83c7e73ea7da0656145b078e9ff52051703f437bb8c285abe8dea8b4f3b7dff077078173a71e528b","ssdeep":"192:pHI5djZ1rllBIDHSamnzXSw0mBvnS5JeznE:G1xF2fIlE","tlshash":"8cf1b80567211bafc221a1c21cd23bdc556f26962cd61b82e5ff9d9e8358def3123722","first_seen":"2026-04-15T05:27:57.214081Z","last_seen":"2026-04-15T05:27:57.214081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9ec88aa67ea123eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-04-19T08:38:14.501894Z","times_seen":308,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":36,"receive":2,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=43200, s-maxage=21600\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec88aa6fd3b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5765,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e02de9c24df9f0a79a85079295aae02b","sha1":"b864fcf3d41a0abbecddebe199782beaa4e6720d","sha256":"20bd4bc96d1ff59667d636b68cc58b37fc5f4cfd06798af6b3c230974a3e95c2","sha512":"5a5e6363ddc60670df9e0cea5ebdaac19d99aa93c2212bcb0711cccb72472a63dbba884e533c7b618c438fd47a4acc75a1285687b65b5b49f8874b1d5cdae1bf","ssdeep":"96:0NbhiWUmyvx9JwTUmo5OkvoyM79hT4bRQ8osJohKlR8iqpmavlT:rwyJv4xo5Rwb78V1fJl5ZadT","tlshash":"9bc1315e4bd0adaa8f34c784e56cf9eec42ee007c1ccacd995b0893541fe5a76641126","first_seen":"2026-04-15T05:27:57.227351Z","last_seen":"2026-04-15T05:45:13.313336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":56,"dns":19,"connect":11,"send":0,"wait":385,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2190\r\ncf-ray: 9ec88aa96ef1569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 839\r\ncache-control: public, max-age=31536000\r\netag: \"cfPi3Q2pR9-1VkL9hnF0Qjwt9_fmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:32 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=15+9 c=3+5 v=2026.4.0 l=2190 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ec24d6d0f8cc15531022c1d2d10ed5","sha1":"a35dfc22eac4a148d164ba1c0c0a30622d996cd4","sha256":"c17fc5b943b9ef6f7b6ddd64e34efbe217a7328513c76dbf33aed86c0019793a","sha512":"47054745bf01743c5756f0cb8a021dca767c880bbe1ec98a44d6819d6395d991dd88def918500862b763955f09ff0b31a7e8876e4178fd2b0aaaf7711df24557","ssdeep":"","tlshash":"eb412940ad424ea8e6031af82fac34a8555a0d6f64478c0d8029f336325fdd2bac4f6a","first_seen":"2025-03-04T08:48:45.474684Z","last_seen":"2026-04-19T08:38:14.469282Z","times_seen":403,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b74b5775.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-b74b5775.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-628\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EX5hFHEGrcODvYo%2BFXmKdoZeYtN7ZKG8FqS24LRBunqCG5Z2kAGZGexdxYWcKmvofm%2FumXQYPUMEupV0cOVF5KgHRdcBc5n6YdMCShUVdKmHytAH2rYW8PofdWtd7IUp1ELPy5mHlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f0bc756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"7feb369b0717ed940fc77726cb756fac","sha1":"039b1a4bb6172960d9d30cfcbfbdcee84ce7ebb5","sha256":"9d048059a94ebe46312c6f775581f0cfaf60d3107010b3841af248ccce58e6d9","sha512":"4d920161c3df1bfd7fcbbc6065b3d9c817fb75a19ec47c56690219ff1d42ac7b20563d761bde3e3e522c2c212a8d69a2bf44c55191d607da3d9a2e2160ef7ca3","ssdeep":"","tlshash":"cf319585637a24a424a3d0e50269da201235642a921fca7cb2fe71f08f7d4c0653b712","first_seen":"2026-03-12T16:55:22.799237Z","last_seen":"2026-04-15T05:45:13.357332Z","times_seen":7,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b74b5775.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-b74b5775.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-628\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQh9aPyRmhWbbbXygONKPoveWK91sOvw%2B2iCOsoWedwbfECDdIWhOeuqzXjKjEcSj9PPh%2BfAofEn4LrlfESBKZR7PoQLlsbh5tHTHSn3lECPVkKBqgYM33JSx2OWz1I55H%2F5ASqhdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa17c1a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"7feb369b0717ed940fc77726cb756fac","sha1":"039b1a4bb6172960d9d30cfcbfbdcee84ce7ebb5","sha256":"9d048059a94ebe46312c6f775581f0cfaf60d3107010b3841af248ccce58e6d9","sha512":"4d920161c3df1bfd7fcbbc6065b3d9c817fb75a19ec47c56690219ff1d42ac7b20563d761bde3e3e522c2c212a8d69a2bf44c55191d607da3d9a2e2160ef7ca3","ssdeep":"","tlshash":"cf319585637a24a424a3d0e50269da201235642a921fca7cb2fe71f08f7d4c0653b712","first_seen":"2026-03-12T16:55:22.799237Z","last_seen":"2026-04-15T05:45:13.357332Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9jNt5aRxvox6ZOL+sDi9e4/tVBD0PYkydVYnt8HjHqYFtsE4MWybAkQNdlR+fOAyXwCUMd2lBnfajtj4AjW4Nt/0PkDpXRm2\r\nx-amz-request-id: X7P60TKKRSGT0FG5\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-04-18T15:16:20.979179Z","times_seen":438,"resource_available":false,"data":null}},"time_used":2758,"timings":{"blocked":1237,"dns":8,"connect":260,"send":0,"wait":283,"receive":0,"ssl":964},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bsv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bsv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TUjaToccC31tb5uzEvD3DYMQ3JORZdD4OBhs0MPvc76MMCdrKe+itdqLixrsPp11mQD9xqm9Mq3k6behgvc0oVXtbCOgFI0A\r\nx-amz-request-id: X7P7E00XQ1KTMB25\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:36:30 GMT\r\nETag: \"0a6c14a948ec11e6b3bc19ae2aed7c22\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1817\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a6c14a948ec11e6b3bc19ae2aed7c22","sha1":"0f79ca42c47a7a37253f23b608fcfbc2493dd84b","sha256":"fdb30ade7093c96b4c5968e4a3721388c3be1e0325266645f40a995d8667486c","sha512":"3d6acc8ed9dae0981c23574fb5319dc64591b22082392253e9da74f64832f45cafd2db8a652d40478edbf2752c22576938acd4757d6ce293c34653b4e79e8233","ssdeep":"","tlshash":"78312555a370f368b904b3f8d36494b1752664fbb253d50896fe2125fb4881e0cfb98b","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-04-16T01:47:52.097868Z","times_seen":334,"resource_available":false,"data":null}},"time_used":1775,"timings":{"blocked":1491,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-e6521786.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-e6521786.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f2b\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rN7ejwyrnjZ9OujbLb0ACB9Y9stbAzgi285NGKxRPnsuHqRqrbNC%2FGsj6goDgOcAR6OSwrteulnZiqBxurW2BDepKPCtoiMH6%2BHrui7d3pGAXEn%2Bw7UPtcs55yYtHzZjfPH3PJT55w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4bc5a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"2fbe582fe14006d7f683ecd82a35c824","sha1":"964aea3d211de25fc724b73dc6c70a544c9b7fed","sha256":"fc736fed8435ab7769dff3a886a179ee41dcc2616a1ed474469893a9f64b1f2c","sha512":"74efd46a634a762510df53544ac9fac88f97d9281e940f16c2dffbe40518c3aa29c2e18465731dc3063ea4c63ad409506979a885d5269b0a32110f162e35d1b8","ssdeep":"","tlshash":"3d81d95252bb9178a861d1e10fdf16842216943b5a18c47ebaca61f08fc72bc9839bb1","first_seen":"2026-03-12T16:55:22.851031Z","last_seen":"2026-04-15T05:45:13.330314Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\ncf-ray: 9ec88aa97ef7569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9698\r\ncache-control: public, max-age=31536000\r\netag: \"cfNST3q60e3DEaxemhB1mMC8dRfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:32 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=575+4 c=0+3 v=2026.4.0 l=1264 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-04-19T08:38:14.498206Z","times_seen":497,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/w3m-modal-b1ff8ef1.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b44f\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rc0TVgxhqrnjrAEOW%2BxDsDaIOQfhjU30qmtjPt%2FwmP1MzM6k3h8NwLuJj84q6rVLs9FHnqOue%2FZOa0fvNBAMqKT8tkMlm0zRYuDhV37OqjJK7yttOvCDtTp0A77mDPtdB3fLNrM%2FKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f5be456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"939d5ed7952354468d68c7d0ad95cb4c","sha1":"f402c7b845087dcb86479606875bb6d6bcece0e4","sha256":"100384b853afc98771bbceb371f77e3cc0bd4d8a601c8363d1ea31035ccf941c","sha512":"542ed5bb829766a962245b5b32cd1aa40caf5ef780a8c68ffb6de057601ed8acb566afe514bf8b68f358fcb716b45645d92806b31753c13b4dfdf6592aefa84c","ssdeep":"768:mBEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:iCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"ae2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec51d58fd498869bf735","first_seen":"2026-03-12T16:55:22.864975Z","last_seen":"2026-04-15T05:45:13.325582Z","times_seen":7,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/HelpersUtil-2286d400.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/HelpersUtil-2286d400.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c7c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2B7PmpRfmk6KpLiO16bPM3qO%2BH3KlMYPvTGHQvJTGO143AnFIPZK%2B6ux7SOD9xQpB2b4pKiflTgDxVs%2BHDgf5vwqi2LHCzfW4RIcXV8rCYbTBtLLqtgWNGqA5lRo3xFWE9Mkua41mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa2ac2056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"2577c54fa41a9dccc6706936ab629516","sha1":"d5105a9b203ee4b0cdc9069dd68b0544ba269bb9","sha256":"f6a93469ee23f561dd26bc93951d314f6a434acb3e9b817491ffb09bc86e262b","sha512":"eb1f2486d459eb023d8356c141554814aae7108d7c38a0fcb9c4f5d7ed3eb8f97e10c3d0f6b792af317d68e9b355411b19ac6981892d63bf01fb1bd3c97cb114","ssdeep":"","tlshash":"6c6145c5f3fe7e26350704a999adc5106336702a291e9f3e7bed53f84f0af81a856520","first_seen":"2026-03-12T16:55:22.832602Z","last_seen":"2026-04-15T05:45:13.296679Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-908eaf68.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-908eaf68.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c3b\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FgXeVoymyoiTWgemA4XE3122113Tl8N17zku0MhpD3YceSy3a8G7KfCrbmjqRVI5tzKdEYC5mOR9EUJJOmXVCSXIN4oFHkmYfU9lfal%2B2rzwGqOv4sJ2RUpQiortcZcbVQ%2FWc9wpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9efbc656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"6a45e7de68b26701f37dc8ac7e2cf75a","sha1":"3977c612faf9663fdcc5eee807fca284fd9eaba1","sha256":"4416fcdc9f731a72fac68cc1b4f81d66839da5bd12ff93fdd69dc9e0dc96c595","sha512":"b168da57c881a2284952b719195857337bf4dfe63e18bb2382ae77cb5de2d1e6c23e214b0b5103bd911d018b3137d7869894349bff2c68d9a55b120e64876d71","ssdeep":"","tlshash":"a55197c1772b50b59107e0d40faacd000b2291279526cabfbddf71f58fae7496819332","first_seen":"2026-03-12T16:55:22.808918Z","last_seen":"2026-04-15T05:45:13.33511Z","times_seen":7,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-ad0cf90b.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-ad0cf90b.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c1d\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2godHHTHk3U6LZ6WpQIfzllLAfpspjpwfxTi7BTkGHoI1KoT%2FwIVtfVKkbfmkmXklNFVYIPEYrxc4fJ82N6H5Y7NAtQvk%2B0zmMu6lGHTdtxPBtO%2B4RfQIuRNSbgvnMp0k3zyMdq2bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b2b9756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"cda56e760bd25cfb758c254f2141c161","sha1":"1b0146e385cd09be690f8c1a7effe6addedb10a9","sha256":"99e8dc7c9dcd87b36f9295d175c89a4c762cd902b1901f7b4de4aeec121b24c6","sha512":"3eb32cca620e4e7da07411329fb966ccfecf48ff181f8a34d26a2f766c96a780bad617a2bacc3877d1e357650fc432290d4eb11f784d97a705a532479e486491","ssdeep":"","tlshash":"db516221f042ae3cf3b750652098784865410fa899646af7b1ee5e0f23d9d726b9f738","first_seen":"2026-03-12T16:55:22.842075Z","last_seen":"2026-04-15T05:45:13.308718Z","times_seen":7,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/VerticalTickers-51842e44.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/VerticalTickers-51842e44.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-59ea\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0V%2FW4YlT1o%2BC8Mbxcuflr1roEZJ3nveSPnXmTUSYXMhJSX7WUEG4SVv7HoYTycbduLi%2BWPdRHjKgYLRYwOIRWe4l%2FGiP4x%2Bw3GXVQeouSCEcDnIR3B9PI%2Fr%2BjnjjEn4sPeHBHo0DUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ddbb056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"570019ffb59b1cfb223a5cd7949c9c0f","sha1":"5c90a3e3e92c0416511cfd026f3fda75ebe31d6d","sha256":"e1a6013a6da2dd7f0adf9fe7a68ec96033c8121e15532a780e16f0c206cfa698","sha512":"8ab4224f9ad7cc8c26415a494b9152a05b542fcfdb72529f8a29e5e53d29c3b65aca566dd5c8ba70443ca47397aec07c9305242d4fe53d47124ad04377d0cac1","ssdeep":"384:i7589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:S+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"8ca2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb95d25f7fa9","first_seen":"2026-03-12T16:55:22.84593Z","last_seen":"2026-04-15T05:45:13.334247Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1d08d906.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-1d08d906.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-127e\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyDvhF8N%2BDH7FFsdy7Iy289ghr%2BVFqYwx08HaxPiX9SY4Opt%2B0negoD%2BDCCOYNbR8cn8d2BhNWv8SewHaqao86Bex9IuHVmPiP4Cyg%2BPowDlWB2PWDH7DCTO9UGUgQ%2Fl6DS%2Bit6T%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9efbc556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"4aa99fee6dafdfa0ca721935abeb1b6f","sha1":"ff87b575043779474c18a9edfb0884bdd35ed14a","sha256":"8e96b3d61ada813ca5d45f205022f238f7c3cac56ca5fbaadae85738b1fac16b","sha512":"ac5dabec749cbdd5e92ea0f27b1528304103d15c73938786664db42597383b01f8d48e014bb228fc1ee4a33ca7da820a13006e48956851d531e348944a4c1e12","ssdeep":"96:WXs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:Es7o9KK8ZMY2vcpaC5c7eI","tlshash":"3aa144c22daa252a3951d099ae5b8910e322c007d21dcebdb9dca1fccf595c3107e722","first_seen":"2026-03-12T16:55:22.857337Z","last_seen":"2026-04-15T05:45:13.345845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b7a416bb.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-b7a416bb.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-f7e\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTcDfiWIIWUkXVrlu%2F3qF%2Fm3%2FFVsMz1ETvt7CR1sWtKzpz8XN80quFLkwTSM0gIX0w8Ix8zzspcGmR5pdXqL%2B1ZVy%2FrLovHijO8pRlZ2pLIrJqDi5XDQe5%2BMoSql6zGurj0KUu614g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa2bc2156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"a304de782e3a1982407450b066fc8c8b","sha1":"651ed3180e6b7355d5330f81ef5976bbf8983c1b","sha256":"4e0d04746970c0922a7dd1da94db7a8abca6a52d27b964933cd46ec4e6094542","sha512":"4421f779724a80839930c82fab6341a9202076804a4c3dfb8ef5c88e42887c27df28581ee2655d708586e4e3f5a4a865083fd83b532207e6beeed1f79a45a1ef","ssdeep":"","tlshash":"2e81969ab7771864342b42a9fbde4b245232b05e0a1bdd75f3cc12d58f48a689b4b230","first_seen":"2026-03-12T16:55:22.821582Z","last_seen":"2026-04-15T05:45:13.269973Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/manifest.webmanifest","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbKQB4J81MVBf9e7AFZthjJwVlJEAvMkXQ%2BY1Y%2FXXMg3SjccmSkcqFOtIEUEXHurxmobVrso3PbHJiw1KKLmQsVsrfVt2gHs5RCo0%2FU3CqravvFxMP2CdqaFiYwGA3BnqeVZ1LGOag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec88a9aeb8b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-04-15T05:45:13.27476Z","times_seen":26,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/receive-dd4142dc.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/receive-dd4142dc.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19dd\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGpmn34LPOezdKSAxueJbX3ZP6C4VKETZ%2Fngwv5L5SgZ7xC9j14zi7jXUfRXKnYjP4sbO%2FIyGWvme8M0XblPPNnsnVb7r%2F0tMJuVnbjX3IXv%2BYIIKrVpNTr39WUJigirMS1mNudXEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f1bcd56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"69cc40957c96ab75bdd1be0576655109","sha1":"c0f74683887b55a4b4a52ce1467b19f682d2f73a","sha256":"8bed1ea7bc1dcd8183178033558f3d3c6e26868fa66f9504eb73b89d5a7d22f4","sha512":"da807948303a1ca83afbb3e0f37128f5c123356a843d4d11f0183858273540d61a98db52685c47a9d8afae66d5117d4b89f080fa316acb48d7fffb699f828783","ssdeep":"192:XXIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:nd23vx30IXuTjmpqAY4c","tlshash":"06d1c64559b638adb812d0981e969a00c131404f9539c5fdfaec83e58fe968689ef722","first_seen":"2026-03-12T16:55:22.839211Z","last_seen":"2026-04-15T05:45:13.321757Z","times_seen":7,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d0518d72.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-d0518d72.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-12eb\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuDZxGyTu4GdjA2uuHKQAa3oHj41D5kPhQ7kspat1k8dHFFtQ5oUmNuwklezQ2mN99TJOOv3Es810m8DehKmLtNxRGVzL3zNMBy2ERaNvn8YRs%2FxNRXYOggf692%2FrEulom3%2BMZMNiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa17c1956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"3bd90731de83d6c59f377ef197bd6244","sha1":"e59af6e2d099541b9be9f6e525083256f4bcf1f5","sha256":"c6c6b988b51d40d0a6ef246c47bfb5dcf408448620ccf3e11eaf944ae978a0b5","sha512":"67b5b7f5fdc9b6f35a58e35a9b2f3972903654d3edceebf8daba0d0d2b01609f78e734f699497dd2f62d8d9b00f2296b1dda51cfc0e203a278b493c949ce8c23","ssdeep":"96:GdhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GdhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"d3a1c7f77167e7e0951747f5ccf73811611b3cb6bb064e0aa58ceac8de16184868ce10","first_seen":"2026-03-12T16:55:22.834443Z","last_seen":"2026-04-15T05:45:13.329394Z","times_seen":7,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-cf3\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sh%2FX1BlBeu04y%2BGBIgrf3mtbXBSZCQSgXYoiEBHqvtVFyyBssEOiXIZoYnYsWdR391h2X3GW9yfMC2tSK5q%2FVL6q8Uuk3hr3D4MfpoYp183tLvo9VE0lHTkq%2BzzxoSe3VlWBkPW3Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa3c7e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-04-15T05:45:13.344822Z","times_seen":25,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/index.html","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://poloniexexchange.vip/","date":"2026-04-15T05:27:27.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odF24YlT5mtGS1k%2F827ta19h0LFLfqLcaI5qXAuwjdzVq3EMCgj1ivP%2FwLflpdMnxqOfPfZCJwRfd1%2B6Mn8sUNnhmuW06wJkCP7tUxrH2BMIzu3JZeOitQqYeYXvK932D6w5tUjvwA%3D%3D\"}]}\r\ncf-ray: 9ec88a8a8b4056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2364), with no line terminators","md5":"86e40b107b63d0ea673aa8ce66b5a200","sha1":"632bc7e921f798ec92f3e0ff203ba26bc1d49ccb","sha256":"a0b6b94c92ced61123e0a6b0840eaa8740179f1e59804855ad4ab0ef401db2bf","sha512":"8a39b604bbcec2b15a04e5ed45c2ee34459b834b118f4e8c58ddbf08878ade1136a3793ef960b60a04babff5faf71e116535858ef64efb7a1c5e8a1e533b7c9e","ssdeep":"","tlshash":"104121539482261af0238eb992f9b924c57cd426d6821f9970a179b8c7c2fd681e331b","first_seen":"2026-03-12T16:55:22.818316Z","last_seen":"2026-04-15T05:45:13.354379Z","times_seen":7,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/v1/api/config/platformConfig","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I64Ox48kyqLzbVDGnIUJ2VATvYfEMnKFmID6rEGmXi2elFO%2BP58QTgMaI5bHEYsY4jnTrRkS3VZokleChoT1VyCZHe4O%2ByhI636RK4mTyveiBA2l2IolluaN7Ym2%2BHHQrsUcYiqP4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a96db7856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3504,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"948019ac7e936da4c811e69c12622cdf","sha1":"002db6216d877ae1f4084fca5feea1e097e75a61","sha256":"61e3758c54f2edbcc99a58c0e748d5bb4287f6e5118ce7710762c63221afc2e0","sha512":"aabcd50afcb5770925b0fc535d0d2b3cc6fe1f067976cf6e3bde9412b02782312eeb5f8c785cf5930c4845cc87b262a10aa9fa9e2b1922df66966851d1904b5a","ssdeep":"","tlshash":"3c71fd8e2326a5b4cae011cb98da19281f7c99e76844f44fc29bec643ef7492252c257","first_seen":"2026-04-15T05:27:57.260651Z","last_seen":"2026-04-15T05:27:57.260651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/home-87506211.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/home-87506211.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-58cf\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxUx%2BWx2lL7EA%2BPECCzJgzvt8R1jpa1qe0G3WjkS9TsQdLe4spzI2w1i3deY7ekQ5GwjFmoCbjFpT9EqUZ1Esb1taE9u3lUlq1V9zgW5objKtYjby5CxALCYDogvQ0lo3MGzcFKoVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b1b9256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22735,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"d712e767e3c0d7a822bb71d67ce3705e","sha1":"0a44a58e83fdc551200218f7bde60e87c277f69a","sha256":"a9d3a69be62287a2f374965222fe36327f5bba53476f692e82a3a5c9a31bd959","sha512":"5b3dca7b9641164e6b5bf076aa1f9089e82961eb73fc5c4c21423a0f8b5c2e16085cdf75042242156e36eeb61c51e6cd80d78912361077f62750b1af06e20415","ssdeep":"384:+POqo1Yg+ZEYKJmYyoLDpiS2L86DaiEkR64A/+r3RyL3C38su9INSAK6MjDX4syv:KOTR+ZEYKUF+piL86aeRe/+r3RyC38s/","tlshash":"1fa2fad9fd0ada3ab5b209944598000035141feee52181d1b5fd1e0a1febe7e13afb2a","first_seen":"2026-03-12T16:55:22.798104Z","last_seen":"2026-04-15T05:45:13.341339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d0518d72.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-d0518d72.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-12eb\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pnsddgc0PA1GZuAMyXuaZ9Xhg7MWtKqgfIUNB%2FJbIUDqhg9DYtlm%2B7O4nMtHtqBLEazRhXVuN8FkHP3lOc4Upc7gBNMK9JSFj8druMErVz6cXXK32k3edMlAl5Zdh8eUXlBWtj7vDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ecbbe56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"3bd90731de83d6c59f377ef197bd6244","sha1":"e59af6e2d099541b9be9f6e525083256f4bcf1f5","sha256":"c6c6b988b51d40d0a6ef246c47bfb5dcf408448620ccf3e11eaf944ae978a0b5","sha512":"67b5b7f5fdc9b6f35a58e35a9b2f3972903654d3edceebf8daba0d0d2b01609f78e734f699497dd2f62d8d9b00f2296b1dda51cfc0e203a278b493c949ce8c23","ssdeep":"96:GdhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GdhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"d3a1c7f77167e7e0951747f5ccf73811611b3cb6bb064e0aa58ceac8de16184868ce10","first_seen":"2026-03-12T16:55:22.834443Z","last_seen":"2026-04-15T05:45:13.329394Z","times_seen":7,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-6c9cef39.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-6c9cef39.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-104d\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQ0wfpWXyKTzkIBqRD7SPbd4p4IAhdEvcd%2FoA0ot2qW0YFDrkn2r7y3LXoR7dbO6PBhyU01MSE%2BQyhKKtgLMHMPhVFQqo7OyjRAM1%2BJMU0hVyO%2Bn7%2FuCQpMd5hc60%2Ba%2BucA6GlLNNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4cc5d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"3dc3c4f44f473fb0a351fdb36531de8e","sha1":"57cce8b649feb62e9aff2d79818934d8f19e359a","sha256":"0681ad2b343ebadfe5203e239adc5fbbf0a8d2ef03c688bc0dc658e6b67456cb","sha512":"0c35fc6a6de7dd34c77ad9977eeb608caf90fc7cdaab09fd9168e412c05b4bd22318cc1be53e53a26ccbc7a3f34481b88738f424422674c83956cd00bea347a8","ssdeep":"96:U5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"f981c864b37d217a79c390588d366d01d334401ad11ec9a07bdca0a78faa2ca9db7771","first_seen":"2026-03-12T16:55:22.80659Z","last_seen":"2026-04-15T05:45:13.311649Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-8e60d136.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-8e60d136.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4f6\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdiMLdWhd%2B%2BkNaArUrfdWBbX7iD30g%2FOs4tsVSS7wnb%2FzTRwrzUwLNyuY4%2BDMA7rRRbKaaY9Zo306zIF%2FeaKVsygpBqnlb7SxDEzEB83FUXPUbZdQJDCk8KsGZgiLrcyubkhWO9rgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9edbc156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"64e87bcb6c2688f973f5ae740a407f74","sha1":"de592c129157d3cdc56d8d60eb5f363fc4545f73","sha256":"3161d739b5ddefe4b38ffb35b5443064de5a6080b5bc22045521b6df70438dcc","sha512":"56703fbc95be389a33a6dad1b1ce85c0043a7974f780d32456b7f750046f34082ed4fa95ed9c1ac2227734f2f54b5cea36c191b8d44bc71f0e8b17dc7dd44a15","ssdeep":"","tlshash":"aa21658417bb7295b5576189463c4b06d23240539a1ccf3d73dd76e48f5c1c988bb324","first_seen":"2026-03-12T16:55:22.846803Z","last_seen":"2026-04-15T05:45:13.383855Z","times_seen":7,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/ref-3335a8aa.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/ref-3335a8aa.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-86c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRlATRtvQYhj9APCiqMrISDDHrJ8BOvja75bROwnjtPFWdeJNQC5CdOMT6Xy7HlceSs0ECqyLWlaVaxsqQDzqIORruEauabtOQrdIdI%2FdwNxZZ%2Bqyxme2HabAC1bFxfNkl4u07WzEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9eebc256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"c74c45c1bc4625c4b3614eb4c826dc20","sha1":"97fcd282303451b149ac68ca0d2b64758db0704e","sha256":"72d7bd1827c0c2feca9b6c730880c3d5151b39580ed02253fa6b4935669a9394","sha512":"d41e51ebd278c80ee41c96ca9f87302121a5435430de2b980ec7e60d1aa3cdb5d9a04f3a8a947c8da455d6960c14ff5a7e9c37bee13c01233cc17d14eb5835ca","ssdeep":"","tlshash":"3741f19773d801d212cac6e7fc37892af11131583a65845cb0ad6bf7e83068791bddb5","first_seen":"2026-03-12T16:55:22.859073Z","last_seen":"2026-04-15T05:45:13.366165Z","times_seen":7,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-fc6d5a31.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-fc6d5a31.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1008\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1A6b4dbQqvqgBUgAK%2FjoYtYktXQ%2B%2Fv6VA%2FevGFzGGZhaShTWgy8nmUQTj9Dlzycdk204ToUO08zhUQLAz12908elV0nFj70yv7c%2BwWVmRozuvpkYykY6ww12e5ewx69qwGPxyxXZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9eebc356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"3e1006835216683dc17e7b93a2b97ad8","sha1":"c486940c30ff8b9f716697ac8da66ae85be7be7b","sha256":"2cd22ea99865c65f65fc2aa037057dd1809df32cc0c6eaa9bfa937be197bcd5b","sha512":"476eff1023d4174f2900ac7a40a1b3598feaa34e5d50369adb226e7c66cfbab81dd7aa77f07ab2a9bbe29f138ef8f0314fb17a213422f94c94f669e8e0d1fd5e","ssdeep":"96:1JPHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1VHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"1881c5857330d912251e8a6867fb8206373a50274225c4fcb6cd9af84fbfe459b75b70","first_seen":"2026-03-12T16:55:22.824614Z","last_seen":"2026-04-15T05:45:13.298616Z","times_seen":7,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1aae9526.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-1aae9526.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-568\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfZ3D36emAFjUNu%2F9YrxNkNHnzY0bFRBknwzCbKRn%2BVuid52YjPB9VuxsLkgZNckZBmyLN8kCl9NURDjb8Uh%2B6BdL2nzjcC52IlpsWAcQuyKzWpvGe2TPPSNvYejtruD%2FR4nD0aJTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4bdd56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"e35c6d2283184da2e2ee2f962d978617","sha1":"77642f77d797186b495e610e59ea15f9e8c0b170","sha256":"09dfaeb54ed325674968b34ba9e5c9053deb7de0675545af1a9c047e322c6712","sha512":"8c7a6804cbe68fe7a0a3f1a4a06a1ef242a4061e0c617c5c43ce2e037702099396d04d33df92b7483b16fc858d72b7d11a869a8660ae30ab0a5b933e27a0e014","ssdeep":"","tlshash":"642136881669d7f205859599c6e9ad028125051bcf28d0a173cce1dd5f6ddc4c5a6b33","first_seen":"2026-03-12T16:55:22.822404Z","last_seen":"2026-04-15T05:45:13.297627Z","times_seen":7,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-7cf1ad98.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-7cf1ad98.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-18a9\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUZ1g83R8lxwyvoW4S7WPYK6ozOpBZmM5tM9jsQLwAV0CTXyVsYGdQmNTfa%2FygFECAUMoNjoI2dwKLWX%2FCPbAqacohOCTgYRwxMemtnentAGFI5PqZVD8gz3Wk7r3XrgkZzW%2B9lQUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c1456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"69386e19d1259595921129156676e7eb","sha1":"57b44a4c9162e3bc65a45d86cad67af07998b0b9","sha256":"4f18a271ad4bd5e36ae65ad8941a7d278baac94681964b6575ae3a6a7a05ec33","sha512":"bf6b0c740470e63a2457dd8362a352cf4fd5ccde66a1fd8496fa50e400cb4bd06d24155a8db87f362b321ecf40288d744041d532db3c512950e4fa6a84fb7351","ssdeep":"96:Fi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Fi0K9+N+DF5si6SJHG","tlshash":"6bd12fd13e756e041523c939a7ae9d49e331a037c83989be77cc91e08f9da405aadb31","first_seen":"2026-03-12T16:55:22.843738Z","last_seen":"2026-04-15T05:45:13.368187Z","times_seen":7,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1aae9526.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-1aae9526.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-568\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWksx3i%2BXZC%2Fs8EaIXjPoKO2lr3GBQ3nr9ipVdOm%2BTcIqkbO%2BbucnhOohDd0LEt7NIaDZNyea%2BsDhdtOVyucOGWLSc1Hwe0%2F25lHIyN1hBthyC7D4oiydbZqWiFyYCqqntuuyNF%2Buw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4cc5b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"e35c6d2283184da2e2ee2f962d978617","sha1":"77642f77d797186b495e610e59ea15f9e8c0b170","sha256":"09dfaeb54ed325674968b34ba9e5c9053deb7de0675545af1a9c047e322c6712","sha512":"8c7a6804cbe68fe7a0a3f1a4a06a1ef242a4061e0c617c5c43ce2e037702099396d04d33df92b7483b16fc858d72b7d11a869a8660ae30ab0a5b933e27a0e014","ssdeep":"","tlshash":"642136881669d7f205859599c6e9ad028125051bcf28d0a173cce1dd5f6ddc4c5a6b33","first_seen":"2026-03-12T16:55:22.822404Z","last_seen":"2026-04-15T05:45:13.297627Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800, s-maxage=900\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec88aa6dd1f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d624ae72d5da08a9698cf19ed1004a52","sha1":"d2da4fc91b5567dfa523c551f8b8501b43d0384a","sha256":"68df83e68b02e91713d9e5b52a22c297d98ec2d5acda0c37cb47162547cf35db","sha512":"90aa31b4915827753f86420e7b64e4f7685df1bf06908974128eb66b8699e549781120077589005dc68e9fd726c8904fb322695755e997ba1dd28a0b90e77d58","ssdeep":"","tlshash":"9a90020520487596c052c631c21157075d258e732d1460345025090990bb4750841823","first_seen":"2024-07-15T21:15:20Z","last_seen":"2026-04-19T08:38:14.471106Z","times_seen":368,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":18,"connect":1,"send":0,"wait":473,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7a3\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnZK6Z6zwNBDvoe64cW3iKF32X1XSYnfSRbhRC%2FIF6KWDhrwVUxnj2%2F55cmEbp5matY3EqyCsvQLQqsSlZFObHpCloLoNbf5uPkmU2CZU6N4aNVKR3lXWmN4BhJG%2BW1MfjPXQ%2F4PqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa5c8456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-04-15T05:45:13.324146Z","times_seen":25,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-49d29c21.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-49d29c21.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-38263\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqgAkh3v9do5AmsiCff9Zg03EsxoQbWmIgOTS1jOg3%2B%2BfWbQIv4zxAOF3nyNuGeaCF7Cy73JDoaUg7ckgV7nop5kCoj9xyT7wPJwgbpKC1XTBXeZkY05UdLR4xMTJ7ruyUX4f27p0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f7beb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"d638dbc28c50dff4faed1ae0eb44709e","sha1":"fdb393477c3e25b2a826037cc1357fbb8b85d5b5","sha256":"8fef8e5c0bead675652fc0aad7c900dc5fa8a1d5a716facd2be3c8f373be5a40","sha512":"19abfad261a6b61b7d53d5f3e053c2b1af6a30cce047c6c3efe6254e1e737f1d9da2601dd71207cbfa4336d0fceaf0b1df3156fdbb49c0020c2e6f5540bff8ff","ssdeep":"3072:G5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:riZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"c324f8546bb069186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-03-12T16:55:22.847583Z","last_seen":"2026-04-15T05:45:13.355342Z","times_seen":7,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ada.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ada.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: t0ktMwCw9sdRIdss36J068JoGsxfEW5Tlb/6C+KXohiMVLoeID8jeYqvbYjq+rcTVn8gH7lMHhW3cXPgogAJ+ePOSvfBEE9b\r\nx-amz-request-id: 4MVFQ06H3NKKKSX0\r\nDate: Wed, 15 Apr 2026 05:27:34 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:08:07 GMT\r\nETag: \"958ad0ab023fedd13301398a46f0ea98\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6511\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"958ad0ab023fedd13301398a46f0ea98","sha1":"1f006086eb1afdeecc534e1f9990435502080c98","sha256":"2f91923ef20d262b5fc74abf33fdffb7888e7cbce646e0380122825cb872f410","sha512":"819afddd9ee026b64182974f5e80c349651953e593725109b1d723884f4bd463e83d8443a8a22ad1b9ed76dbff6456071d19c5ec2787b4673d9c7bc6da4389bc","ssdeep":"96:HEENXWNXq2E8vTAd/IOZVMa/zSdv/RPk9WUvykuM+Xw7zROT02yrnfqzE:jXW02ELNIOZSe2M+Xw7oPSqY","tlshash":"25d1735973faa3b8b001e7fe87a794617a4529e36912d574c3b60e00ea8503d4efa853","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-04-16T01:47:52.086666Z","times_seen":187,"resource_available":false,"data":null}},"time_used":2046,"timings":{"blocked":1762,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhX-3214edf4.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9c2\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28VPS%2FJBRKNgr4aD5rCttFQIR0BB4smif6CLJzTGZ67RgkPNy2iLnG0068%2BRxqSWcmidgTIJUfIccFPKcXXRYkEf1PXnm0CYXdbdJnaip9dzgIxpOW2CKU%2FxGUmF%2FXRnL9KEkVm%2BTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa3c7c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-04-15T05:45:13.333412Z","times_seen":25,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-500545c0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7a3\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gt8l6KLkmh%2BQUdYyXLjdFcTxLbCY3tHAWb7EOo2oW0DLUDdE%2FQzB5s117m06j8i4lrurmKJSkST2B1zU5w6iMmq4uvFjijD%2FoMrCWdXk8X3aLs6Qj5ZBhskjLZDZqghyLopn7UlHzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa5c8556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-04-15T05:45:13.324146Z","times_seen":25,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/favicon.ico","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/","date":"2026-04-15T05:27:27.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:27 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmuKGZfWEekzs7W3ey83jForOo0EMPLhDbI%2BXp9E6mCR%2FNS4bZRZpPf7XMsBCpAxE9Vy1QN%2BJPFadt2aKmeLAjjrAG1XMf1bzR6WhcavpVkfrHbyD%2BBk9odKtRR8JkA9LNJKS8jqgw%3D%3D\"}]}\r\ncf-ray: 9ec88a8a7b3f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-04-19T08:48:47.870182Z","times_seen":10804,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":527,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/index-64018b0e.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/index-64018b0e.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-108e\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSkTelJz6oaml6wfvQRtbyXkQk2LeKFsqagQjWM28roRZPNnf%2FAs5ZkcGiSSeoCsb2mcsrTmxUn7p6eR8rnc1peI7GIaq3LXRDvRAD8jJWGn%2FzABF8Zh6g0aBkl41Su3n8v%2B1Z3Gcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b1b9056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4237)","md5":"3c684af8b172bbf98c9863dd2dc7db9d","sha1":"f4d6852ce2e2c7aaecb3b7adf9307a836822b2b2","sha256":"64018b0e7980220a7dab8725807c61cddc279c9cd2b2b99e52b8a30dd18ea7de","sha512":"fbd99a64c8fd263ac3484229eddce1ccf7a6627eae44f99318d0588132f8eeb196487a4b97de590f591991becd18e48e46b64302bdbf73e22930ab479dd539cc","ssdeep":"48:FlF1D0mm2g1lMQE2imldovbJevkdFGVRIR8/FsvrS5eR6YShFQCGvRjVjmrT3xYj:7t5dFS24F3526Y1CQ7jgThYcfhKn","tlshash":"1591cc3bb18df6086077db91f3d17688925de523a2c569fa540c286dcfc3e8127b1369","first_seen":"2025-12-10T07:39:13.865038Z","last_seen":"2026-04-15T05:45:13.353319Z","times_seen":32,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-49d29c21.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-49d29c21.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-38263\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHgMDbAf%2BBfb6mUKsCpE2HQiAITo5B%2BawRppU8P5Szb%2FGNljR7RA3PETFSTSU8kmR%2FDLcvDUQXTiyDZRbNCry21kJAchPNz7q90eSVlCRGp4ABvVqcokGumgtH6jj87965GW8oFihQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f1bcf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"d638dbc28c50dff4faed1ae0eb44709e","sha1":"fdb393477c3e25b2a826037cc1357fbb8b85d5b5","sha256":"8fef8e5c0bead675652fc0aad7c900dc5fa8a1d5a716facd2be3c8f373be5a40","sha512":"19abfad261a6b61b7d53d5f3e053c2b1af6a30cce047c6c3efe6254e1e737f1d9da2601dd71207cbfa4336d0fceaf0b1df3156fdbb49c0020c2e6f5540bff8ff","ssdeep":"3072:G5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:riZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"c324f8546bb069186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-03-12T16:55:22.847583Z","last_seen":"2026-04-15T05:45:13.355342Z","times_seen":7,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69af4728-45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqWZzFWGTIkUL6ZoJbW46DAuw5KDaqmIucMr4zLa%2FInTQU9%2FIYVi5BJtXF7Q6e%2BqZievSBiBJN9FP9Lh%2BN9jJwIPLOkAY9cqZzbshxxytDroYxEDTEFqNwoaKEbRcjxran6sx5Tldw%3D%3D\"}]}\r\ncf-ray: 9ec88a9f5be256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-04-15T07:13:33.540541Z","times_seen":40,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a1ade1fc.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-a1ade1fc.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-42e1\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2Fbk%2Fpo7j7n%2B6fHqsX00MHHdyhz3mPlv7NJTNeMp%2FOBqRb3PYOhP6UD6PcAT31qKST%2FkL02OjSR22hhExGIa4ZB9j6tZdnD7%2BGpLHqcBFrDtfDYkG%2FxGWGR0nm3%2Bw9gdQ2dERlHGcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa2bc2256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"afbd5b4f8e7f8b2912972faea3330203","sha1":"7f14c7ce2c7d70e5dd677a5faf04d1a57dce0553","sha256":"08c1d3313dd2f22dd0a9dac24efd7cc641e2ab3e0a38378ab2e15f358f5aed21","sha512":"95c04b7b6bf21ea096f5ec6c16d01a33e563c1e05315709393b25feffa6bc62b32d524756c5b315fcee364bb2c6026f6a4f842e884ae1ec6cc482d075646112a","ssdeep":"192:QBhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:Q0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"1672a7ac3693bb28a9875bec26f55150f6343812442ed5bdb6ddc3e28f16a844cb2371","first_seen":"2026-03-12T16:55:22.825409Z","last_seen":"2026-04-15T05:45:13.379612Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-ddb31605.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-ddb31605.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-716\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMMuzwtoe83cJxv1l8t2QPXcqMEne2fg1Jav1GgcmbJhbwW4ZndxwPo71%2B6i82smL3jyGABncPk61VaP0%2Bn52RWTi2n94FO0QONz73Po0RNuvCWP6xcnAB%2FLNz124mQIjfGweeUGdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b1b9356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"01e180ccd3a6abc71fac9bb289ec4f02","sha1":"58ab965eb4025e21aa492a23bc3818bb463ea66e","sha256":"776ea42996263432291bbd28400bf5b5a72debbf92e503e64a544940bd551187","sha512":"71d9748d7232ddbee0751e6b55b7572239f72d3aa911de9ac5911946252af128dc4617533705ab524c4f7370f9bd07b5d5babbe38417ba2a069ca3c291c0c988","ssdeep":"","tlshash":"d83185c2f1db2579b37adcaac0984461d23c0949f50097e6f17f5c1a2b601c0bf5ab18","first_seen":"2026-03-12T16:55:22.823313Z","last_seen":"2026-04-15T05:45:13.314817Z","times_seen":7,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d513d59e.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-d513d59e.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7477\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlxA8x8CJp1YUEerICTVL7sqm4vzscN97uukHfUREFh%2BlIW9ZKH8RZVMuSDTmc0vjFBLSAtkESVuYKfNm0RF3R%2B%2BtVma4Fu0sbrsc6A4Vh8J0FiSnBqzn4qlJykpp3aDVkNUjNCrIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f1bce56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"0a5d9db5082a28e1785d86b2db2525d3","sha1":"b8d079af4f4d0222acd707b00a5d1ccb7fc21349","sha256":"55f165fabfe1eb657a50423ceaecdea5c9228aec554634823f4b0971bccbdc7f","sha512":"19fa56c806521e40de628f7e1b4c98748762d91c8ec32592eadb9021a437c867cb8b5e1374a3a8109baf153d9574c93153492b075842256bc4dd9cf46a703c76","ssdeep":"768:LnfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:m6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884acfb4da9d37f79e6a94bbf2c","first_seen":"2026-03-12T16:55:22.878363Z","last_seen":"2026-04-15T05:45:13.320307Z","times_seen":7,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/receive-dd4142dc.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/receive-dd4142dc.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19dd\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NOpyB5ScKN5Nb8GUtjJzyQYAZ00QWraTEAwinbCh%2FZjpC1NbBRGjV2yEtlnjHx12N9CeVbn36rWQQNnc%2FIoPlLpqMz2Y4RAQgYC8x9oFVH74gwy%2FN8E9vVy00DkvYcucerj4l3OM%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f7bea56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"69cc40957c96ab75bdd1be0576655109","sha1":"c0f74683887b55a4b4a52ce1467b19f682d2f73a","sha256":"8bed1ea7bc1dcd8183178033558f3d3c6e26868fa66f9504eb73b89d5a7d22f4","sha512":"da807948303a1ca83afbb3e0f37128f5c123356a843d4d11f0183858273540d61a98db52685c47a9d8afae66d5117d4b89f080fa316acb48d7fffb699f828783","ssdeep":"192:XXIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:nd23vx30IXuTjmpqAY4c","tlshash":"06d1c64559b638adb812d0981e969a00c131404f9539c5fdfaec83e58fe968689ef722","first_seen":"2026-03-12T16:55:22.839211Z","last_seen":"2026-04-15T05:45:13.321757Z","times_seen":7,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3090\r\ncf-ray: 9ec88aa6dd16569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85548\r\ncache-control: public, max-age=31536000\r\netag: \"cfmK10fIs0rtXK3D1w_qZdnstVfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:31 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-images: internal=ok/- q=0 n=9+5 c=1+3 v=2026.4.0 l=3090 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8e093ad4a0e0bf420966897e5d52611","sha1":"90172a764ff649c9553d8e84ada46adcb73f33ed","sha256":"4a00efea74245ceacea37a3e83f0a4a2830236143357d3c57e96c4dd154d593f","sha512":"50b07fcc6d1c5460e69613f4509eb8323b11b6634ea8f268bf541eeec6271bfc5852200c34f385ad82d44c3e3f70122e783f1669d9d356d65be4ee82a20d6546","ssdeep":"","tlshash":"d7515d250e57bb7f0fa7793b2e97c313955320052e06b200b624f75101940863bf35da","first_seen":"2025-01-22T15:25:28.982905Z","last_seen":"2026-04-19T08:38:14.492756Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":336,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=43200, s-maxage=21600\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec88aa6dd23569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"83c79e57023102c06f159dc38aa6576a","sha1":"666310869db97c815801ae3e09216d8582375c5a","sha256":"c08ccb5df5489ffe00b1fe96863426d7dcb96f199d7345bf74ec8498a85ab7a7","sha512":"9160eea47df5e0774bb3db22f1287e34e78d2f5bfc96e2e75f9a11671efcef4b686de7c9e1bb11e0f8ea6b39a23c5f5a8d0731404d7e52c15454d6aed83e16c1","ssdeep":"","tlshash":"8d51539e57809dab5f349788e14cf9dac83ed00786cc58ea64f2853440fe863b3119a6","first_seen":"2026-03-12T03:41:14.103704Z","last_seen":"2026-04-15T07:13:33.936182Z","times_seen":14,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":16,"connect":8,"send":0,"wait":404,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d513d59e.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-d513d59e.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/receive-dd4142dc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-7477\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5VzSQZ8KmZKcRrVBp7S7BLRInDojkVdzWnrgiNka5oeGzgtGORA%2F2ICHM884niXddt1s9rBfUcTUxVMRNE1RRGevfXTESr42MKLLiZeHATbgop2dKx12zeFVgcLDNqb6qfVbSJMhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa26c1d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"0a5d9db5082a28e1785d86b2db2525d3","sha1":"b8d079af4f4d0222acd707b00a5d1ccb7fc21349","sha256":"55f165fabfe1eb657a50423ceaecdea5c9228aec554634823f4b0971bccbdc7f","sha512":"19fa56c806521e40de628f7e1b4c98748762d91c8ec32592eadb9021a437c867cb8b5e1374a3a8109baf153d9574c93153492b075842256bc4dd9cf46a703c76","ssdeep":"768:LnfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:m6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884acfb4da9d37f79e6a94bbf2c","first_seen":"2026-03-12T16:55:22.878363Z","last_seen":"2026-04-15T05:45:13.320307Z","times_seen":7,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1107c1b3.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-1107c1b3.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bcf\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3Ruyzn%2F0nsS10ZVZ0gLokMJ8LDappOAHn%2FuxhRLqDRHWLP0N4xyiHZwlWuRK0b1wSti95LMTkvNU0WX6wOUTiKF83mlAu19VtlOGNvHuPnxKHEqy1fidBYJ3QPNql%2BTr4N2ub083g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa2bc2456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"6510b61fb435b11e269b698dbf41a2a5","sha1":"d4484c8f930015cf050f7f8fc3429eb2878e4284","sha256":"fdec41b69bcf830b6339ba7062b12ae3064ce044a475e2de2cae3fcfe37e78c0","sha512":"e40fdb466a63aad6a911a28ec628f818e81a969a319482c1a120e6db9a5198a3b41cb51cebf4c7072b0070ce4f05f2c6984ed35e8d7162ea1d34fae4325baa17","ssdeep":"","tlshash":"9951b8d7b33a1176385592941eae4ee05233e01ba11cde3ebbcea1f84f461855c36632","first_seen":"2026-03-12T16:55:22.801034Z","last_seen":"2026-04-15T05:45:13.315655Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-0944fcc2.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-0944fcc2.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-19ab\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sErTUnh304z4Okf%2BT07hh3PzR4ys71jW4iiiw3hW4Ecb353J7tBdclSnkdHQLKyI6bR6d68UwF2mC5HrLMSG87fu1VkrcK1kK3lnH9zjKyzM0mxImdfAHd4RMxPk5DLevxP%2BxRQ9gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4cc5c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"b32e02ff4612b55b84ae058268999916","sha1":"fad1adda138cdd7a63f8b54fc5576a0b2c4de283","sha256":"56a4f536e7bac1aabea2a016ff2595143fde4eafdc144794c87b3b7627d094a9","sha512":"0158731a385a91437b2954c923e2ba10addba9667c668ee7cac6b0bf040218d12fdd15d274aeea7f3128c8684fde19b4cfdf7da08d1f2463db9e837ecf01d7a7","ssdeep":"96:wZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:wZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"ded1b5bf3d666415a632c0a58b928c04d131901757088c79b7fd19a8cfcea89766f764","first_seen":"2026-03-12T16:55:22.837675Z","last_seen":"2026-04-15T05:45:13.382489Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-dc6c0f23.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-dc6c0f23.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b3df\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvnpL4GcldNZ3WH4B%2FAybsJ1D4ZKHXc30pdy5NM%2B11o%2FFaOszbgHlCSDAe8o%2B4AdULdbfNVnJjKXuL6Hq0AaSzTrmm9lxLnXzjABpsy1GjOr9IFRw6WAx5WQ5bucQ0ijxnpyVXyBVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4cc5f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"34d4b40271d601275b4110dfeeae6f06","sha1":"8dc4be576be03d1321365f8e76eaceb6351ea1cc","sha256":"d6f2a417c26b0a4b457a8dfe02f13b7e478e6454b8698f7bec40706985576454","sha512":"eeed29ae3ed96b20ec5f0536081f1fc3a68d989c4c621178b9d467b034aac1f443ec12e5cd864d939d4d37fdad5d2f35bbe42586ff9fd31595e70738f9b09169","ssdeep":"768:1PYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:9+qIzcUWb67sHYbzyER","tlshash":"3723b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a719b1618edd6bcda","first_seen":"2026-03-12T16:55:22.83672Z","last_seen":"2026-04-15T05:45:13.362208Z","times_seen":7,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: 9ec88aa68eb223eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-04-19T08:38:14.509398Z","times_seen":283,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":40,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\ncf-ray: 9ec88aa97efc569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19674\r\ncache-control: public, max-age=31536000\r\netag: \"cfUhkIr6pXeZzg1ZKkKbDihKqDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:32 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=10+7 c=1+5 v=2026.4.1 l=454 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0be57955d7f50dd9f7754b6dc10309f","sha1":"1120733df2e8f9bfde2f713c1de00711d356d4ef","sha256":"a29fe26a43771dee6d0de34f06c4aa118119e919a370bf6b37b89d89eb157547","sha512":"b115424fbd8acbdaa1fa6efc5e7f9b447adaa80ea67d542fd77c68fa0748f993670f6befa7458019db1243b2056f03872c714a500260333b50fd2aec778fc95b","ssdeep":"","tlshash":"02f05c1dc884c9a0bb9834cbe8a2089b02504ea0cba61a320a052dca102f45b0d5aa71","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-04-15T05:45:13.378685Z","times_seen":440,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-c24422b6.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-c24422b6.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c03\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tf%2BrVclTxBaomDVvrZVVv5UqsZRyxROLK%2FjKISP3%2BBCVmfJMviF6duMt0nOlNztZt6zRxL0LmeRKxH8aBm%2Bk%2BzSU4iXDHm3EV0L9vR56l41C37TG1iQZtXSjeYfzyN9iuZ9CFAIb%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f0bca56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"62c5cce2d8883f65cb2bb22412ad4452","sha1":"701a9c740954d6e33658fdc7bdd24dca5f9aa14e","sha256":"2c00853f4d1bbf86ac33682faaacb87d60fed67ba4ffe78305ed41dd497a422e","sha512":"687e8931ac7e355e7460dbaaa828e09ed28aa9c624e03975fd52e13b31021681ad8210ee294dd957f83f50d005cee5143d4be2993475f2fdb652d4fe1868cef5","ssdeep":"","tlshash":"fb5196d0bbf7797d65328029a4aa9c104322c007d378cbb9facda2f64f9964154e3376","first_seen":"2026-03-12T16:55:22.804223Z","last_seen":"2026-04-15T05:45:13.286903Z","times_seen":7,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/index-3cd34980.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/index-3cd34980.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-6bb\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Co8ZMXlIJjenf5Lski7aTHgK1E%2B0LEFHDWzVhmj%2BLqINqc2mP%2Bk1R0oNHRzfh4JdRefBB7btP%2FbkivXR3oFDKthNZZGdi9791MdNnz6f2QTvcaxaYmS%2BxRMMb0r1CsHUu4epSKaQ7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9afb8c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1722)","md5":"8954e8e993c0cb85e470210a616216fd","sha1":"f7c0e384e8782c24e248cc13b4b9bd2394e779d0","sha256":"3cd349806396c6cbd9d6d50d68e9c265823560f0e9402ac67009406e9dd034f6","sha512":"83edd994300f5877052174f1ad511ad9e75d0d86d510478316925da888a7ccaeab1b53e15d0635be48422bb28dc41439b3374aef940c54d25fea70442669b41b","ssdeep":"","tlshash":"2431252ef6e063385e3e697057da1dd4e33e84208d629094fd62e424cac76b202729e6","first_seen":"2025-12-10T07:39:13.890273Z","last_seen":"2026-04-15T05:45:13.388178Z","times_seen":31,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:27:26.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 22:18:15 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYwUNHFVwltKuyyY%2F8c4npCADqEWWK8dYHuvih7AiYeC3C5cPsSGu%2F6wIvLKl%2BKrGBxxlploqyJXsB%2F5SgQrKoHs9FSDdFrz25D%2B0GklcBcae30lKeMHHvjfjoPLXqRAeicH8pqE6g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ec88a86e94f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a94cf09d11d3bcab3ca6d961167e5d42","sha1":"05038eeab9c8fe632402cdd0617983a80092750f","sha256":"f575362fb161a660ee78538b8fccc9bf7b459f5b36d7ba87ad2c6db2537d6188","sha512":"13130ff2cbf4d2da55dec18421908fc0c0b1ee5d6b992c133e0a206b44c8f4acb9e60fcd3a325650f9bbfeea8c7548f8f814d8dd827ee02ce6d5b1496b42b486","ssdeep":"192:vS6WuJz9Cc5T+KeP5VPkLrhkohUxSPNS6J1Dg6VEHnhZBt9HLtm9hafUCzCSDKCB:vS6DT28HJtUdrtmja8ItTEaIARgvY/","tlshash":"b1225367a8e300596457a2641ffb332d3635900b7746cda83f9d2ba48f83f858453bd9","first_seen":"2025-11-24T21:16:20.874299Z","last_seen":"2026-04-15T05:45:13.390636Z","times_seen":32,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":37,"dns":20,"connect":1,"send":0,"wait":410,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/home-153f1fa7.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/home-153f1fa7.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-51ae\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXjJi%2Bo2Xu%2BshhsqMlyukBhmNp%2BXwKnU586Kbw7QLBJNgeVAm86Ndpkz3tiTTe9vGtxj%2F7q%2B%2BQ%2BLS4B0Bw3crck9UwP6TcsYAMRPR3uSQ7f%2FLXoxGPXMabb3w4F2zoh4TPjtQ44PZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b1b9156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20909)","md5":"307360794192f30206de9492fa2a651f","sha1":"8cf312414410383c7f0c866d50bcb9ec12227140","sha256":"153f1fa7e5bf3c57dad6eba8ced78d630bac7afe94287d98d1c41097c396b854","sha512":"5f065934743d6abb8fa538043686cf228bb1c68d83e35574f3e4c7deb66b39a01aebd6be3264cdf237716b13e4525183e7ef704a38c9c6c6cc186767fcb05bea","ssdeep":"192:q9UJAZev9+FdCvGOYRiwvkYrIonYSL2U93/tG8lUQ+iNCZp:q+ByiwvkYEonYifv08y4NW","tlshash":"e392537b220a3318e137ce505be91254922cd573e21226ed6865793acfcbbc225f275f","first_seen":"2026-03-12T03:41:14.082686Z","last_seen":"2026-04-15T05:45:13.340449Z","times_seen":12,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-4cb28ea6.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-4cb28ea6.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-141f\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDQfS2cb3OzUiqZA9ks3pvuL828TEmcEOTNMStoyGV021pkqW2C1niSzabhsnSaZn5oJSNRa5weW2fC7pkVnfL1OyKkafviV2%2FaqA3xcFeiGzFH3OxS4dfr67Qqdqc3WUD5exKaGbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b1b9456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"fc565663046785c73279178fd07ee961","sha1":"432e3dd5edf33cc368847b9b160aa7bd91c20abd","sha256":"39f6d4dfe06a9415fc42e27f562fff81063da761a718a4624160b485482273fe","sha512":"188a59f70989b71c510977cadc2db23e3e72e08b527a87640d310dca088300f90bd2752f1c87502a08c55adab9c95bc2a50b3ec96db1ecf0199a440c672b966d","ssdeep":"96:vCz7IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:O8aa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"28b1a7d17190fcb7d739dacd406042e097ae57e07019c5deb15f9e03250acfc66eaa49","first_seen":"2026-03-12T16:55:22.831707Z","last_seen":"2026-04-15T05:45:13.335899Z","times_seen":7,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-25e9e0d3.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-25e9e0d3.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-774\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVvTbmjRaAexCAVkH%2BUozJ1bjTcn5wmm%2BBBan1RgfxUXjpP4ndccuBTCDWM%2BnwNvvx5aTypD0egR0BcRBoGbIbLt6k4NRLOFk6O2c9i8SiLbHMk9UCYk9Ni2EXMy%2FvBtH%2By9pZkuag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4bc5956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"2a17a65675aae9c1402fa1dd8503ac6c","sha1":"2af0e6c7aae04538344e4846fcb14cfe677befb0","sha256":"ee425f7d56b3c1b5f4b1f7a0e87f2100fff5d820fb87f779c00aa3462c396517","sha512":"63efe203a698a4d4d2e12dc1a422ec0e3c99972e3f439151ac3c8e798a7cabcd37d0f7a8e3dca4973c7c5025b000caba735c3a3cbc74d4f88b3b5f0deaf0dcac","ssdeep":"","tlshash":"0241a4442268bab600c466d6c0968a405121002c590bc194b7fcb5e29faeacdceaf73a","first_seen":"2026-03-12T16:55:22.88049Z","last_seen":"2026-04-15T05:45:13.285313Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-ray: 9ec88aa6aeee23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-04-19T08:38:14.4652Z","times_seen":306,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":49,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: 9ec88aa68ea423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-04-19T08:38:14.469914Z","times_seen":283,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":44,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/VerticalTickers-be1df74f.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/VerticalTickers-be1df74f.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-14af\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOnDkGKpkMlOCIEoyQzHhAGORLr0ZEObr7JpS%2Fo61%2B5yF0%2ForxP9cLc%2Fodc0l9%2Bwm3I9QNZFQFz75zAtals8SQ2KL%2B2me6Oj%2FhWNhlK3DhNJJpBlaD3oISLkAc%2Fp2yPxbcE7DO3jHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9afb8e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5294)","md5":"440cdeabbb9eab724c17f0b5beae3338","sha1":"4c99f5d4947c5450a2d24d49aa1f5784a6216b26","sha256":"be1df74f1c54fed82321f93f8c4813ebf34185b3e4076ee17c0f759ee15bfae6","sha512":"e5e18c4697a9c2e62fb24c35ce7df30295281af626884d5cc8c5efe85fff78d4b50cde4c4b1a56938438f0acaaa250ba8e6a6d666d942be0a9a8d3694d26afe3","ssdeep":"96:yl3R5eATYYFMhn81C8Z888kFXPPbsckvWZGqzJTtTlhI:yl3R5eCYYFMh8f2fkFXPPQvWZGqzJTVw","tlshash":"91b1772b63d61f19d133dd041be9225a83a8d1b3d2b523e8a4905b258bcbf0e15f3286","first_seen":"2025-12-10T07:39:13.841218Z","last_seen":"2026-04-15T05:45:13.371176Z","times_seen":32,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-a9b5a56a.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-a9b5a56a.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1b23\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujGmlOpFcPtF%2BVxcQ8uXRaLqx6qfaR%2B7a2FLRgwSRZFEdpCwrjdCljGnL%2Fif7QxZtsLHSn09b9Pp6j1E5oSujwIiBuj1aM3mynzUY7x9AqARKr%2F13KdZtE9GrWxd91l0evJ4cWtncg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ddbb156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"15be76634ddc9d89e12f0471155339c8","sha1":"19960fe52cbc474168b5988c1c9d297e0e49a541","sha256":"79793f4295cfc478fd637b15d8abba228aca5a352981efb88c20bfa1cb6ae805","sha512":"6324b3662800c0c39853e4334a01e8aba6d52c63707f3cfd11873fcace34e311f8e580ef6feea25a7e53a479fe766b891ec2649dac5396b900e44608bca2156e","ssdeep":"192:rDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:rDEIRRuUCL5dmVp","tlshash":"27e1b601ba296e3cf73b84582406529561d09f59ea30c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-03-12T16:55:22.830914Z","last_seen":"2026-04-15T05:45:13.277003Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9a6a5dc9.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-9a6a5dc9.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-593\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iag1dsDbPIN2UyD5tbZms2ftqK51cTXvYIGbDWsCxqzmsABmomB8yCyFdHTAb3Fp%2BYWF6G6Vh8lWdU0v%2ByY2T5HFQ2seWLAUqQoeYB8I5GCaen2TjcETB83Xfvz9ArfK%2FRp2bOWZ8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa4cc5e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"b2c0a0cc945cb89cf466022af34f1e53","sha1":"09ccfd82eb75e2590f2ffa1fed3b7786c218fd3c","sha256":"6003c01736f7d50718c5c287059f788474debe9d23b75849215ada0e5c968a6f","sha512":"ea033598e556b3caec8382125d4ade834c0e72e7d48d9627dc63ed4c20d9542afc9451e7291fe9b6588a6afff5972924b99bbf259877c323561682ff923d72eb","ssdeep":"","tlshash":"e62183c9276acaf0896140768f25350132376007972fda86b6de7aa48f0c5c58a6a7bd","first_seen":"2026-03-12T16:55:22.807481Z","last_seen":"2026-04-15T05:45:13.303589Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\ncf-ray: 9ec88aa6dd20569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85533\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:31 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=313+3 c=0+2 v=2026.4.0 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-04-19T02:53:54.694018Z","times_seen":1259,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":16,"connect":8,"send":0,"wait":41,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhInfo-6eb82573.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-ad8\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R39qwvBVXK%2BG6WgEqxsMq5eO%2F7uG0B5wSly5kEmJyp3eRFc01n%2BdrmmG3zIxvpJtvL%2FKHTXFCYbKgK8hs2%2BzNdDrqLSuE52WzLAULtaGrqtm%2F44uVMIpeuowIRCsEH0Pf9iyZtWONQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa3c7d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-04-15T05:45:13.352344Z","times_seen":25,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/manifest.webmanifest","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\netag: \"69af4728-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DU15Aw%2Bb0iiEEzrBzLSDeEZZxzW8MyjVQ49DO2bT8aeQPxQ7biEZ5nagXvosbaOdNM4s0qz%2FQFWJUrcL0B7NjTuGEb6Y4xRADnJfRrusMdbcT299SoFpE8mD9ZGSDGYXwbDLCeM52g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec88a9adb8956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-04-15T05:45:13.27476Z","times_seen":26,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/SwapController-32be55a1.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/SwapController-32be55a1.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-35f8\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppr3Eq2GqeR2RHV1PIrf32tTylqkTZNQwSpD9Rn2xzb8ZMPNpGamKnlE7D8YSJz6E%2BoVXHXvio8QobV1RC1vJlZ%2BrFG0Lq3pNxo9FIjqbBuh3vUDftEK%2BoAYcb5XGIfxKof7H75reg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f0bc856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"27174423065a5660bb1fef9d0b994425","sha1":"ca09f76058db9c415401a7b0926d808111c87213","sha256":"8fc76e2362edf3ab52ddfbe58d162f85db5558ad6e46165e410984cd80f9a060","sha512":"a37588f0e3bd281d08df9b5fed49f842293d3757daa692c25f4a2a926d91e564e87af8e4c069b982c84421c3130a4c331684b8922a3c082f4650d28cf8669556","ssdeep":"384:Nd0FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:/0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"595264a27360b676471e729879f9131025221cd4e86ef4ece8ad05e30ff159f1eeb921","first_seen":"2026-03-12T16:55:22.800162Z","last_seen":"2026-04-15T05:45:13.299618Z","times_seen":7,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-4b7f89b5.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-4b7f89b5.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-afd\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQPLQ3Te3qc6ESpLXPsDWkY19K7is1yTvVaXTXntH96iChaatSMezI%2BmmPf9lYkcy6vh%2BXeoKt0qXEgzqeCXZ72%2FZ2PjwSq4qE3eEO8KVLcWexqVIOarnDvRqga6%2BK8gF5qixxnCCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f3bd456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"a86e0f0ee2c1c7befb74cc5f4a84bf45","sha1":"3d588157398156805196a7d092edd30967308fca","sha256":"156156a0f7ba3c3a1c11b6950cfe15daa40de2351a65d53e3db60333e79b09a6","sha512":"b010ebc2b0f06f0c9547a6b27d53c8ef06a63520449c299dc9206b319081a15cbedf7dd1249e1bfeef5570806bd3b698eebf7a1e31066728614c6029633cf1d6","ssdeep":"","tlshash":"955144c972242a7637538055d19e4d117321b03ae438fe2e36dda1ed8fa99835829a33","first_seen":"2026-03-12T16:55:22.876186Z","last_seen":"2026-04-15T05:45:13.380429Z","times_seen":7,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-60a89093.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-60a89093.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-814c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7y2AhiF6R5GaWwqzx2uuo1i8KyavMzGGkOU62Jumkfa4OCdi5m6ouibSlbSecNZZrIfPkfM%2B52p5pCDT3Wd3PY4XQtVBsRRptPwWKw4zryS1cbYGLsRVfBlIeJJ7%2BPX7LbkYDIuMFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f4bd756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"0b9d0bca352e5221a19406ecf3d0910f","sha1":"7b8db0102584b40289de1c8c003219a13f5fc8a1","sha256":"1ec0d15d6e4db8c4e8aad4c4c73b17befe3c1961631b9bda39a3c42087267e68","sha512":"0dd5fb1b30a765748570d9309e8038286eb566dc00eeeeb7b8c0ea177cf475edbf9c494a6f39d642ff95eaf9ce4150ae06341893d1eceeae2943dd46ac583d06","ssdeep":"768:XCzlkEh6WjzDJ/NCYUV6Xi7QMR+gXPJjNHe7DGls4+DBL+FUytuLUed:Szl5h6kwViiPRFRjNHe3Glr+lKFDcX","tlshash":"14e2f7c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-03-12T16:55:22.811651Z","last_seen":"2026-04-15T05:45:13.347632Z","times_seen":7,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-500545c0.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-500545c0.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-dc69\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GCqcAnuq9gs8L6dE2kYR4o9vMBoHLk6FA9HtD6o6Ne84SRpl0CCkRodkuXjftCwWLXHe8i1zzdCg3xeO6NPJcVMGeuaHkxWvA7mSnb%2BaThVDuZE1iiSxaFWlkJYt132jZqNgluAVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa14c0b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"de35a8a60a9117e3cf0b29cc71f26838","sha1":"4615b88938ffbad2a0ef2744acf383cd8838ffa4","sha256":"fc996c43f3b0f20eb4d724f9c7af53fbdd66b800bcab392b690e9e32649f49c4","sha512":"ad4c41b71223bcc0bbfb7dbfd06e4ecc8ff4e29f6cabb8e55589666304ae61e1fd4634545f444269891a91a2190ffd87be9777a962339e877568a0ea8718f151","ssdeep":"768:ElYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:fAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"ce431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-03-12T16:55:22.854707Z","last_seen":"2026-04-15T05:45:13.326294Z","times_seen":7,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/ExchangeController-66fe4177.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/ExchangeController-66fe4177.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1279\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pi%2BLR8EC85URTW22YcTGBBXJlKVCvzij7Jgn7gzEEOIw5t3ZnYjvWAlcjs6SCnCw3dVn%2Fr2YBZAiVhljGv3dYhhgTBY1ioJ9LJH5yFzEGSMtEskqaBOsWy7xc62Y%2BQ69vC18daM6KQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa48c5756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"8ece541558d1cfe3bbeb5d8fb963eea5","sha1":"0ac08983e14232d9e44be93da349f733d71935ee","sha256":"a661fb2f90f3b4cb26b0e1e2d1c55d750eee336cdc4aa4b6f0642ba6e5343800","sha512":"a33fd7000850094497467ce746958f79f66f790bca9ea329b0fd368b9db809a025b61b787a893988cf4e32f8f54170c3c1a000ba5b0ba8a520f8f26099d84fc9","ssdeep":"96:RvPMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvPM1gE2k+1ei+NFnopzo2Vvh","tlshash":"e5a19600b0f2703396d929a025752520cb6d4fe9a467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-03-12T16:55:22.810504Z","last_seen":"2026-04-15T05:45:13.324871Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69af4728-45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKiAlf%2BI8OS8YSc8glcT2%2F6nbQ1FmZvlMuHV6rfIlc5WuMCPijOkN771QWIgiQlTX3gQu3HT1bGMQC7MjlnlFKpo2Rl67qGw%2FAn5uLt4KdfzW0Z3TP1W5XjONAmibO6%2BWWhb023yMQ%3D%3D\"}]}\r\ncf-ray: 9ec88aa4cc6056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-04-15T07:13:33.540541Z","times_seen":40,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d90b3301.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-d90b3301.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bb2\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHzHv4IcmI%2BPDaanao1u3i7unPdQ604Q%2FDglSYFW4KVG3G7e81U9Kl2Og%2Fah4L2whweiEr65J9%2F5aGElJ0TLWGQW13is5mv37a1zfPK0lOgDlJ2DyehiY6uUNgdMRNIY04%2BvGp9iHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ecbbf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"8c674da81682dddf5a26601684c71665","sha1":"ffab90e19b3e776309f73b6d2bc84f8794ef833e","sha256":"791a8e9aeb19cc2459a8ef12619ae653d77216a3dfd33bdf6fdcb0f2e489bfe1","sha512":"e3289b8c81428fa5f21958a048f9eb4d902e2a56b4236831d400a85a7cceff2bd5e6821783cc60ef06b149bc731c9fff42738099b4631dfc0ea25937825ab432","ssdeep":"","tlshash":"af51fdc1ffa8a26ab70bc1bd155ad914e333f00540295f7f7bca12f14f5d584241eaa4","first_seen":"2026-03-12T16:55:22.820744Z","last_seen":"2026-04-15T05:45:13.331089Z","times_seen":7,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-d90b3301.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-d90b3301.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-bb2\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2FKwXwioz%2F05Zz34gaV0%2FlS3zZL2MQYpBg5GfywnnYW3imzVBfKJyx0KaGG3vcq3OGZL%2FqXWRgL4PZjjWhJ7XWuCh29vce3lc9fpBCiKzbPj3TKF0lCegikDPmm5J6glEB5ooeniHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c0d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"8c674da81682dddf5a26601684c71665","sha1":"ffab90e19b3e776309f73b6d2bc84f8794ef833e","sha256":"791a8e9aeb19cc2459a8ef12619ae653d77216a3dfd33bdf6fdcb0f2e489bfe1","sha512":"e3289b8c81428fa5f21958a048f9eb4d902e2a56b4236831d400a85a7cceff2bd5e6821783cc60ef06b149bc731c9fff42738099b4631dfc0ea25937825ab432","ssdeep":"","tlshash":"af51fdc1ffa8a26ab70bc1bd155ad914e333f00540295f7f7bca12f14f5d584241eaa4","first_seen":"2026-03-12T16:55:22.820744Z","last_seen":"2026-04-15T05:45:13.331089Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zQfFnYZZxk/0swAAaYVPtZ+X5zbqzYRPSSC3KUVghjO5a/D+1ghVuv/9t0koPGUUA0rJ2TPTsTNJLXdi/thRw0ksmifsk5b2\r\nx-amz-request-id: X7P9TFCXXDG2J94E\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-04-18T15:16:20.931415Z","times_seen":364,"resource_available":false,"data":null}},"time_used":2735,"timings":{"blocked":1218,"dns":1,"connect":265,"send":0,"wait":294,"receive":1,"ssl":948},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-cf3\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8UnaPBE0gM%2F5uxnIhfpJFJo0uuntziEkYNmNMXQrCskQt99XnMRS3P4a6TQlolcjzhK%2BSTUV0JaUYS6%2FOgacN4hfSRb09VMk5BlLXow5pB6l6vAnbiDEzF8uymQxi9utqonwERyCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aaa2c7956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-04-15T05:45:13.344822Z","times_seen":25,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/v1/api/config/platformConfig","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inCCJfgP1dtgYaaJEX8Ebe1PDBWv5M571cRjMpUffbLgUl1fq1MiaYo3T4TsvrMYIenqUdlmKHc5fGDnMdiyqXlgrnPXuFUW3J2Uil1pazzkFMMv96PSGAd3e6lYak1JhFF0aLELyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a971b7956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3504,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"948019ac7e936da4c811e69c12622cdf","sha1":"002db6216d877ae1f4084fca5feea1e097e75a61","sha256":"61e3758c54f2edbcc99a58c0e748d5bb4287f6e5118ce7710762c63221afc2e0","sha512":"aabcd50afcb5770925b0fc535d0d2b3cc6fe1f067976cf6e3bde9412b02782312eeb5f8c785cf5930c4845cc87b262a10aa9fa9e2b1922df66966851d1904b5a","ssdeep":"","tlshash":"3c71fd8e2326a5b4cae011cb98da19281f7c99e76844f44fc29bec643ef7492252c257","first_seen":"2026-04-15T05:27:57.260651Z","last_seen":"2026-04-15T05:27:57.260651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/index-21b53c44.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/index-21b53c44.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1b4f\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCUO5fZ54qGs0cVdCRD03xGZUq4Zewxt1LfBoaMnTdGy7RIA8qNUE2rDmDjVK1WWOsCNYSstFzilErjd8SykNKnesOwSkdhcV5LhcVzMBHFAf7AuXONwaEJQ2qw8Tu0r2n9xMHCOcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b0b8f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6990)","md5":"4c5be293d21e28e6defc1f29ca14d0c7","sha1":"0519ba50e2bad057e581c8656f2931735c9ab39d","sha256":"21b53c444ab715f26559331069112c974ab29f75c03f3e886da16d426835b429","sha512":"34060427eaa86c6e8a53065165954a217a76002118f4e42ffbc5d9ad9d68ab67d3f2cccc7fafb347108bcd069ce0f5e8bea4f5b429f0a6173183949a9e3c5cf1","ssdeep":"96:xuUFdLcu/dhPG3OMj2s5LqOsXzmXOX5Xis:EUFdLd/dhPQzas5OOsXzmXOX5Xis","tlshash":"2ee10d27110a2208f233ce8857e4976486b9e527d20616ed62713826cfd7fc727e638f","first_seen":"2026-02-04T16:46:53.860881Z","last_seen":"2026-04-15T05:45:13.365227Z","times_seen":25,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/zec.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/zec.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1GLlEdHeFBpGr1DknRdjkGGOPTcDzNsoDV1bkI8zLK+nBgFuRXBYqD6+rHreVDzHL4Dp8ygPp3Ri/VG5N5BzebYsXOwfDzuO\r\nx-amz-request-id: X7PC40PKYTX0ZB79\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:30:21 GMT\r\nETag: \"fd183673e7187b0f6ca27d78fad3e43c\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 541\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd183673e7187b0f6ca27d78fad3e43c","sha1":"8a4c820fd155e44ecf72bde26191767a7003eccc","sha256":"61555157476fb4048cbe21f06e2fc96fc349488747913548aa255248fd07e41d","sha512":"ac3adf02e4feeaa54e11bd9884926835c4b263004644f475a15846c56b7fd6ac932c1d700e6acf5ee22762d926621a05270b56edecf8baeb5469e749830dde44","ssdeep":"","tlshash":"16f0c070b721db7c280182b2f33cac7031b775893587508591d0238076e227f969974d","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-04-15T05:45:13.328609Z","times_seen":163,"resource_available":false,"data":null}},"time_used":1777,"timings":{"blocked":1489,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/property-6708c68b.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/PhQuestion-25ab6f67.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-4547\"\r\nexpires: Wed, 15 Apr 2026 17:27:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTu0W8G6teZ56SwSoYPyimIdxyYdFhexsRC3O%2BolKggidI%2BAsiNWRLOZmznyIum%2BTq0d%2Fff1LyaCSl%2BGjKYyKvQnL9hakyZqbWv%2Bcl6U6NeMU7g%2BbFqy2jQP6XaygKV9U8J1jtQ5zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aab0c8c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-04-15T05:45:13.317839Z","times_seen":25,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/w3m-modal-b1ff8ef1.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b44f\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCzoLAPpd%2FbnQK4gbNyKSALHcI3hdHp2aPj%2F6HNERZiFJKj8PZO6xqw3Cnrf4trA3YqIvn1gb%2BrGf8JMKjGaj3PmqShTgiccHSDVoGBgpPivUBvS2iI%2BtRWLZIO51s%2FeufYoZbZaWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f8bec56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"939d5ed7952354468d68c7d0ad95cb4c","sha1":"f402c7b845087dcb86479606875bb6d6bcece0e4","sha256":"100384b853afc98771bbceb371f77e3cc0bd4d8a601c8363d1ea31035ccf941c","sha512":"542ed5bb829766a962245b5b32cd1aa40caf5ef780a8c68ffb6de057601ed8acb566afe514bf8b68f358fcb716b45645d92806b31753c13b4dfdf6592aefa84c","ssdeep":"768:mBEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:iCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"ae2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec51d58fd498869bf735","first_seen":"2026-03-12T16:55:22.864975Z","last_seen":"2026-04-15T05:45:13.325582Z","times_seen":7,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-5c39d86c.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-5c39d86c.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/w3m-modal-b1ff8ef1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1046\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibDa5Ywsh9Abyvf%2Fy2SmnNcYGDmhKssMcMUPVlIo9P1xu1eBAZX0tMsjqGCX5cOV69mw3%2FwU2kjbO36%2FSrggnqln0cFZRg5wTddoaaTLowkA69Vir5w2LvQ%2F6sOJSXlD9KyUXxniJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa2ac1f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"31defc23a8a751eb880853e554c09c0e","sha1":"86f03041519abcd79610a36d9f0ded8cced111c1","sha256":"2a714fe6cf782f103d614ef3279efb4aae1b9ba2f39eefb999b072e749babba6","sha512":"594bceb6eb2a4399c18ace486d020101d6b75f27654437227c0a140a3272df8ea3aa0b9b67a45b100fb3e3d2edb2d2c15cba86047f14f9ae923a8a2fc84b70ee","ssdeep":"48:qAhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:dCgEQM0o8hJwisSPjgZDIKL","tlshash":"d58116c57fa815e53713c060aa9e4c25e331a027a8299f6e7addb0f88f55643781d373","first_seen":"2026-03-12T16:55:22.828645Z","last_seen":"2026-04-15T05:45:13.358352Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xmr.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xmr.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Vy44SyBdPNLXwAgyU4QsVRTs3rfTNJYCY6ZVJ8EBnpC8nmQCwOKHl1NVf5m7O6UE9Rr4K4lw9By267/tvoaQf+fza6dMzso8\r\nx-amz-request-id: X7P8A1Z3N6XYZWG1\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:26:40 GMT\r\nETag: \"fdddffb238bc363e6e7d7e9fb8b2cbfc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdddffb238bc363e6e7d7e9fb8b2cbfc","sha1":"2472cd3130002709666e130d8bc96fe1fe23fae7","sha256":"d4056d45614e9aa58321b8db2cac9ecbc6c3d9048d49ccae12a6ca5a5a31a06a","sha512":"da68083024e8e5b8412c24febd6fe422cc780c08242b2a4ccd59ff1c37feb820e78046b3732991589d28681f4480661505107dc06616f178be39b310a7674fd3","ssdeep":"","tlshash":"64f002a8f1d8a71c78086344e73b6be061d17ed5f6434351f388bb25b2440569c106d3","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-04-15T05:45:13.305608Z","times_seen":150,"resource_available":false,"data":null}},"time_used":1778,"timings":{"blocked":1488,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/iota.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/iota.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +sByRgjQZG4nIct+ybtyKNz7v5F5DtGM0iU/v1ufDdLfHd1AOYju28FO3SthPST8YxaTWqmRk3hwA43NW2XUHoH4Ky+QH7fn\r\nx-amz-request-id: 4MV6459V7BXS4CE6\r\nDate: Wed, 15 Apr 2026 05:27:34 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:51:17 GMT\r\nETag: \"c0b079160c8f2e118be12f6547f6d0aa\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 11377\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":11377,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0b079160c8f2e118be12f6547f6d0aa","sha1":"dc9466dfa4497a1fb423009fe1a4e1f2d732dea8","sha256":"43fe5f0a8226132ff2223b8ff42711d7c22eefd495885c0a3a257f858c4cd466","sha512":"b80237bab777de38c3dbad45711cfb4c3ad913e88ee554586d6186d992136fd2cb6c6edc67c7d68ee933f583736957255cf2391cda84ac266b728154df588605","ssdeep":"192:SYIPwiTPCacodBhpBkYdbH81rMtAlnjutYtyhFyy/1QNwFG0pbDTlMwYRkEl5h2j:xIPwiTr7KblnjuWBMG09lYZ50","tlshash":"e4326e85a3a412fcf406f3fc8652a8717a531ef87e12d86483f91c16d92946c4eb6cdb","first_seen":"2023-10-18T07:57:51Z","last_seen":"2026-04-15T05:45:13.367538Z","times_seen":105,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":1767,"dns":0,"connect":0,"send":0,"wait":280,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-60a89093.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-60a89093.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-814c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwuJsr4bpgayiRzXAk%2FtLXpKHieQzXhN1IjepmljKQMKidDSs9SiABxuRDlbMo%2BLgQuKVeLl1u%2BV4YiRnpBO73GBgtu2nIwd7HgFHcOTzaJCOuS2mFl5t2v6MaNLbsXDpTHXw7Fk5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa48c5856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"0b9d0bca352e5221a19406ecf3d0910f","sha1":"7b8db0102584b40289de1c8c003219a13f5fc8a1","sha256":"1ec0d15d6e4db8c4e8aad4c4c73b17befe3c1961631b9bda39a3c42087267e68","sha512":"0dd5fb1b30a765748570d9309e8038286eb566dc00eeeeb7b8c0ea177cf475edbf9c494a6f39d642ff95eaf9ce4150ae06341893d1eceeae2943dd46ac583d06","ssdeep":"768:XCzlkEh6WjzDJ/NCYUV6Xi7QMR+gXPJjNHe7DGls4+DBL+FUytuLUed:Szl5h6kwViiPRFRjNHe3Glr+lKFDcX","tlshash":"14e2f7c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-03-12T16:55:22.811651Z","last_seen":"2026-04-15T05:45:13.347632Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-ray: 9ec88aa6cf3723eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-04-19T08:38:14.471709Z","times_seen":283,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":45,"receive":1,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:42.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 21:24:31 GMT","end":"Thu, 09 Jul 2026 22:24:14 GMT"},"fingerprint":{"sha1":"14:D5:ED:85:23:60:DF:07:0F:87:F6:27:31:48:57:E7:3D:EC:B3:51","sha256":"98:75:A7:34:74:35:55:95:78:E2:84:28:02:E1:7F:C5:BF:C2:D6:6B:1B:9E:63:9E:E8:16:BE:13:A2:E4:17:22"}}},"request":{"raw":"POST /batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 815\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":815,"data":"[{\"eventId\":\"0b18fc99-5ace-4e85-a3f1-88474a1ebadf\",\"url\":\"https://poloniexexchange.vip/index.html#/Home\",\"domain\":\"poloniexexchange.vip\",\"timestamp\":1776230852132,\"props\":{\"type\":\"track\",\"event\":\"MODAL_OPEN\",\"properties\":{\"connected\":false,\"caipNetworkId\":\"eip155:1\"}}},{\"eventId\":\"abb5158c-d5ed-4898-ab47-56a8e340e13f\",\"url\":\"https://poloniexexchange.vip/index.html#/Home\",\"domain\":\"poloniexexchange.vip\",\"timestamp\":1776230862132,\"props\":{\"type\":\"track\",\"event\":\"WALLET_IMPRESSION_V2\",\"items\":[{\"name\":\"Binance Wallet\",\"walletRank\":\"10\",\"rdnsId\":\"com.binance.wallet\",\"view\":\"Connect\",\"displayIndex\":\"2\"},{\"name\":\"Trust Wallet\",\"walletRank\":\"40\",\"rdnsId\":\"com.trustwallet.app\",\"view\":\"Connect\",\"displayIndex\":\"1\"},{\"name\":\"MetaMask\",\"walletRank\":\"20\",\"rdnsId\":\"io.metamask\",\"view\":\"Connect\",\"displayIndex\":\"0\"}]}}]"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Wed, 15 Apr 2026 05:27:42 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9ec88ae87c2456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T10:23:19.677194Z","times_seen":13930759,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":20,"dns":4,"connect":1,"send":0,"wait":118,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/index-a167d81f.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:27.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/index-a167d81f.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-5008e\"\r\nexpires: Wed, 15 Apr 2026 17:27:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJXxOfGy62AVOcb7GZ6nVsOGqsbCkSX3e9ErUCnPdEHQN0Yn2Cb2Usaz3ljElwItH4vR%2FuqXb%2B7UP5yFoXupgZetnxc181mj9j5yCfOpTemqljMaNAh2nyZjwn%2FaLJzpnVe2%2B%2BX9pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a8b7b4456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2d09189a49549645194cf0b3b99fb96","sha1":"6938d2e35b3c9cb35ac93380d467c456107b57ad","sha256":"a167d81f47a399c1b5d31c91b3ed423e76f169d53319cfa73824284309d3ba67","sha512":"e23dc771ace21aed0d2a95e8b6f8e8bb365ef088a4481dc8df083954b38aa2ad519a39d94c720b477a9c4fc124d1021b1bc1b0923c70bab5eecc540cd853da33","ssdeep":"1536:OFsJM2FDrx3WqyrtpqoSWEDZsIyNBi3MFYaQj73rx3WqyrtpqoSWEDZtKCE0Zz1V:O0DrxmNH9yDuN0rxmNH9yD+Gfj0+","tlshash":"5b64c36aa690527cbf17faa497ce96d8f23ce5b2dd01dae8f10051184fc3bf50663606","first_seen":"2026-02-04T16:46:53.775438Z","last_seen":"2026-04-15T05:45:13.318558Z","times_seen":21,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/home-87506211.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/home-87506211.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-b0558491.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-58cf\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlQHAv7%2BefNX69mPE8iifNM0XzTA0xrlYtZZ8CLChYipKLHid5Tf8o5SDjl5JW8G%2BN77IjuHPTWezHX7OYW2W5%2BtFrj7NNquh77OABSuQB56wVn2F4Gc5CBjRIdzacV1o4BSnx%2B9Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9dabad56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22735,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"d712e767e3c0d7a822bb71d67ce3705e","sha1":"0a44a58e83fdc551200218f7bde60e87c277f69a","sha256":"a9d3a69be62287a2f374965222fe36327f5bba53476f692e82a3a5c9a31bd959","sha512":"5b3dca7b9641164e6b5bf076aa1f9089e82961eb73fc5c4c21423a0f8b5c2e16085cdf75042242156e36eeb61c51e6cd80d78912361077f62750b1af06e20415","ssdeep":"384:+POqo1Yg+ZEYKJmYyoLDpiS2L86DaiEkR64A/+r3RyL3C38su9INSAK6MjDX4syv:KOTR+ZEYKUF+piL86aeRe/+r3RyC38s/","tlshash":"1fa2fad9fd0ada3ab5b209944598000035141feee52181d1b5fd1e0a1febe7e13afb2a","first_seen":"2026-03-12T16:55:22.798104Z","last_seen":"2026-04-15T05:45:13.341339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-c28c205a.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-c28c205a.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-162c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDAdjP82YbKMF1MkO%2BuEoVjCd1E2P8%2BsEfukGTorlu%2Bx7XkgvKsl6X8nPSDL8qIG%2BXIY66eeIvoA%2BVXGL04wIgbOK9dZMJm%2FTgACp42lcyQzg%2FuQolGvKVynLOli1fztZX6I7Jf1eA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa14c0c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"40e152d7e754dc63fde36d1b623d9ce4","sha1":"fb8669015d6e5c3fc5094f46040cedf0f10865b9","sha256":"5a087037eee74c54ab329bad9bcf20e19e61e7298e9fa03b2aa7d6fcb377ea5c","sha512":"dbc3d1ca6bde2f174605de886ed7b4568d09628fcafe67fe0f353f935cb16e41caa68982f91e3236066f2b88c868dbb419a5a4d061db7f6c5fe5994e31cb2feb","ssdeep":"96:eo2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:32ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"03c144d5bdbd2e7b3517c028e16e86a4e334b0279424df3e77ac61f88f59942181c931","first_seen":"2026-03-12T16:55:22.817029Z","last_seen":"2026-04-15T05:45:13.336651Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/usdc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/usdc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: x92ghGY7trdaz/7pC9mPtaUZix0NqBx3IUIJhrYRmE7aq3r744pbJlKtzj8vSWPRM3Yk8SJvl193br8aOHeayi6EFzqc4u31\r\nx-amz-request-id: X7PCBJHWB78SHHKS\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:19:05 GMT\r\nETag: \"5c25a79d37119009757ba915711b934e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2150\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2150,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c25a79d37119009757ba915711b934e","sha1":"2e9f0e3f35afb2c46d92b5eb5ba0c312fabd247f","sha256":"532f0c97cf544df63632bb949199fd74ab5f88517793696c7fc5124da2dda589","sha512":"a24009f40a65d0794c08f609be4bc69494c822b270bbffe261f040bd6486f99f33af083bd8e0594183c154f858f67526b3c45b5210560788bb9ab28e3800708e","ssdeep":"","tlshash":"bf4151bbb76ea2a8e440bbf41605dc707ed978e53a21c278dbf00c12b98485c59a25c7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-04-15T18:46:47.457454Z","times_seen":147,"resource_available":false,"data":null}},"time_used":2740,"timings":{"blocked":1224,"dns":0,"connect":266,"send":0,"wait":290,"receive":0,"ssl":956},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-4b7f89b5.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-4b7f89b5.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/index-49d29c21.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-afd\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KreaDQ3Ucwy5SuQDaFghj03crnzzoC71uuAhAvgTHCuyUzo6MiITUi%2BOqs45lurNUNPwO8MSj8n4OVd6zpXqJk4fvVAg6aAF6SG0zi8WjP6R5PnR1IHtH%2BqrgaYYuGgVTNxJpq2Lg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa47c5456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"a86e0f0ee2c1c7befb74cc5f4a84bf45","sha1":"3d588157398156805196a7d092edd30967308fca","sha256":"156156a0f7ba3c3a1c11b6950cfe15daa40de2351a65d53e3db60333e79b09a6","sha512":"b010ebc2b0f06f0c9547a6b27d53c8ef06a63520449c299dc9206b319081a15cbedf7dd1249e1bfeef5570806bd3b698eebf7a1e31066728614c6029633cf1d6","ssdeep":"","tlshash":"955144c972242a7637538055d19e4d117321b03ae438fe2e36dda1ed8fa99835829a33","first_seen":"2026-03-12T16:55:22.876186Z","last_seen":"2026-04-15T05:45:13.380429Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/v1/api/pay/getCurrencyRate","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /v1/api/pay/getCurrencyRate HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oExqSnDntdQVUSPZeh%2Bpsccx5UucWorG2Js0VzH3MGh9BjG4u6omH91Mvfarrl4ZonGrLUYZr90SsW443pWBu%2BTsTpq6DLFlS%2BOC9%2F9pyZuKgGNGDwwUu7Lk%2FOVZu3Ek%2FUiRyiSDCA%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ec88a9adb8a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c435a5c27938d00b82fb07f6d41efd73","sha1":"aa256f9e19b1a7da7135e5ed1375ad9d15d52a91","sha256":"ff85f6996f2afa3989f7dec3659a4ba28c321d93a2cc9fe205cd4309c2f0de8d","sha512":"0c0db1018f154084b812f722d23774714b83684422a7bf35b8818dae3959f1f35f652b594f86497a1bdc36df29d4b49cfbd81da86d244ed15f36f9b76811a4ff","ssdeep":"","tlshash":"b3b01245ed1df0f2e501d001545dffc09f78316386c007619ccc4718e645562a442836","first_seen":"2026-04-15T05:27:57.312238Z","last_seen":"2026-04-15T05:27:57.312238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-908eaf68.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-908eaf68.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-c3b\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5skmKpcZW8RMemHOGJgdYsjFnvulaP6Baa3Z4TUVY7Umbw8p0tNjE8EAizj2WztysLhiMRADi5tX3xqVGbxP92DhME%2F%2B2CEF20Spj3R3Lli1wHRG947thoFTtoLNDAOYVBa6CtpGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa16c1656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"6a45e7de68b26701f37dc8ac7e2cf75a","sha1":"3977c612faf9663fdcc5eee807fca284fd9eaba1","sha256":"4416fcdc9f731a72fac68cc1b4f81d66839da5bd12ff93fdd69dc9e0dc96c595","sha512":"b168da57c881a2284952b719195857337bf4dfe63e18bb2382ae77cb5de2d1e6c23e214b0b5103bd911d018b3137d7869894349bff2c68d9a55b120e64876d71","ssdeep":"","tlshash":"a55197c1772b50b59107e0d40faacd000b2291279526cabfbddf71f58fae7496819332","first_seen":"2026-03-12T16:55:22.808918Z","last_seen":"2026-04-15T05:45:13.33511Z","times_seen":7,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.13.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 03:17:08 GMT","end":"Wed, 24 Jun 2026 04:17:04 GMT"},"fingerprint":{"sha1":"C7:61:00:F2:D5:FE:2C:00:75:61:A6:53:17:66:5C:87:6C:DA:E0:F3","sha256":"5F:1A:78:B0:83:6C:E7:52:BD:B4:74:DE:50:8A:44:F2:0A:90:8A:03:24:08:4A:D4:F7:C5:AE:59:EE:6A:A1:8B"}}},"request":{"raw":"GET /mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsIa6aYVOxIhHs%2FDjVfaIoZbZbtmSUKVmSh7%2FYAMfcsqJ5SyDz7%2BEdBHI56gFjTNU6Uh0Tw6m024Juduq4vvmXfmQnZPPYmq1HzDJkpdpXy9g73Ne5kmc9UjceBiTIuVN9LbpA%3D%3D\"}]}\r\nlast-modified: Mon, 13 Apr 2026 08:02:33 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec88aa4fd6d120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e96920da89cc922274247fcd293696f","sha1":"84896a016118ac7d371cf40b55601c9b2ea16e08","sha256":"03818c009e623cf4b6169657f9cb99bcd53e89fe152cc1809154c5d018982e8f","sha512":"99764c35f30fa0ffa84d012975cbe5c977d1272b6f9cc25cf47ad25f0a27446fff2ec7cf9dfadc74714a97df2089c1fdeeed8f39a38ca0d49db04b9baf815ede","ssdeep":"","tlshash":"2a11bde12e3ca3ae80c7438e855641669b2f73f571064c901b3ca5323105becf883928","first_seen":"2025-09-06T11:46:38.597902Z","last_seen":"2026-04-15T05:45:13.306572Z","times_seen":83,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":61,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/VerticalTickers-51842e44.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/VerticalTickers-51842e44.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-59ea\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V56Mc0b4Eap4SXFYq5UVuHn4kSHjHRe%2BXJqes4zZqxZoXO2DrCM4agY5smyeQq2c5nv%2FG9KUr30bJjkDs5nWXWpx0FhH%2BhjKyHjnRHXskvgNHroXAaGoOvNLMfdOiI0sEBiOK1QjRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b2b9556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"570019ffb59b1cfb223a5cd7949c9c0f","sha1":"5c90a3e3e92c0416511cfd026f3fda75ebe31d6d","sha256":"e1a6013a6da2dd7f0adf9fe7a68ec96033c8121e15532a780e16f0c206cfa698","sha512":"8ab4224f9ad7cc8c26415a494b9152a05b542fcfdb72529f8a29e5e53d29c3b65aca566dd5c8ba70443ca47397aec07c9305242d4fe53d47124ad04377d0cac1","ssdeep":"384:i7589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:S+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"8ca2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb95d25f7fa9","first_seen":"2026-03-12T16:55:22.84593Z","last_seen":"2026-04-15T05:45:13.334247Z","times_seen":7,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/ref-3335a8aa.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/ref-3335a8aa.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-86c\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3JDSOfhy9QDwjzXXtM%2Fr%2FVUMyKjSjI%2BLdCLStCWXngPG%2BnRX45dkIPEF5DXrTJiz22OHUywlnI323DP01fphUxqc%2Bl763GJDtRcPg4Qfd%2BoXxci02LncCEOwQ3sDz%2BT8AN1TVoEYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c0f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"c74c45c1bc4625c4b3614eb4c826dc20","sha1":"97fcd282303451b149ac68ca0d2b64758db0704e","sha256":"72d7bd1827c0c2feca9b6c730880c3d5151b39580ed02253fa6b4935669a9394","sha512":"d41e51ebd278c80ee41c96ca9f87302121a5435430de2b980ec7e60d1aa3cdb5d9a04f3a8a947c8da455d6960c14ff5a7e9c37bee13c01233cc17d14eb5835ca","ssdeep":"","tlshash":"3741f19773d801d212cac6e7fc37892af11131583a65845cb0ad6bf7e83068791bddb5","first_seen":"2026-03-12T16:55:22.859073Z","last_seen":"2026-04-15T05:45:13.366165Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/if-defined-39ff01ec.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/if-defined-39ff01ec.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69af4728-a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pv%2BYNjS%2BLxme7QiSSAiRC1UVzVFzJgKA8MvKT%2Boj%2FN3ypfyksBWE0xFIhgHQd2Nov3erblUc5HGMCxE2X0iMrIk2ING66CX5macSbCG7SJMzaW9NSL%2BoP6jXBksqnxzVS7twLm%2F5tw%3D%3D\"}]}\r\ncf-ray: 9ec88aa16c1856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3eaeda4a4879e8acad1735fb4ccddd26","sha1":"76bebef49b1e07d9e23f7986d5585aa5f68cf2f0","sha256":"e283c993d87fdea0d861cbbe0f8d02c57ef0b02b6ccc41ac5acaad8589bd7858","sha512":"f332fc370abf5c75fc6637fc1c35e2875dae57cf0c777d829757045d6232ffb41bb0c6b8b52610ea43f08dac2fe5f21a1440e8df99bcfbe12a46b8841676e6b0","ssdeep":"","tlshash":"20c08c12a82901e34cda038ee864cd4e5020326e5f524282b0a8234688321805a9ec16","first_seen":"2026-03-12T16:55:22.81621Z","last_seen":"2026-04-15T05:45:13.309752Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:32.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1992\r\ncf-ray: 9ec88aa97ef5569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6252\r\ncache-control: public, max-age=31536000\r\netag: \"cfctNhB4Bi9Sx1OSjZpNEcxaPsfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Apr 2027 05:27:32 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=1625+12 c=7+4 v=2026.4.1 l=1992 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-04-19T08:38:14.460418Z","times_seen":535,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/css/index-c074926d.css","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/css/index-c074926d.css HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-876\"\r\nexpires: Wed, 15 Apr 2026 17:27:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LIW16jV50C6CYYvskCM%2FQez%2F%2BRT7T4uyeJR88hkQ9GJtIdnv%2BBqWMJ7MRXUEQg4BkXUD8r0O6GtgW9kIZn4UsbQHlHNVUOYaYFD8MUfyCkil3KUhi2vzS55DfMF7gMDUjPxpg%2BsuEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9afb8d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2165)","md5":"24fcaa8d1efba01db124557375dc628a","sha1":"323606a4765566ff4891b9fc0107607f387b266b","sha256":"c074926db6a49f8c4dd30fa9a9101326e20a337c8aaeaa0203be8d5673ee1e55","sha512":"0cb578a5fe13704683a3d987520f9031e4df2459c38b313dce492fdb3f0686df4896168d1463566032864e56c9ffc20e10e1d6f478d9fc7b64134db34afeb937","ssdeep":"","tlshash":"79417d3be8906637d823b51497d916c4913cf1727da049e971283918cbabbf4031b30b","first_seen":"2024-08-20T09:17:43.593605Z","last_seen":"2026-04-15T05:45:13.302621Z","times_seen":35,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9d24c88f.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-9d24c88f.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1363\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDs3Yf78ef9wJir6pq%2BOewWOQGxH%2BKgSxOYwCXAZT8eUgXrD9CqzWseTAkT7bF%2BDIdiXT2kcS6W05Hw%2B72xzrm2XwgIN3wpslq8nwLCksFuFJuTp9NOnXaovJYbki%2F%2BqGodXHTzonA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f1bd156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"c96bb322f6b946e216e9b7196dd940dd","sha1":"b4ba324d2c9e4b3310c3abfe32b3584e68a3838b","sha256":"748da57ce1edeaf713b242f2f378a28c3eda62c06b8afd5533342ba5e5d9f29b","sha512":"3b8a3f2471c58af71b87a85812c6f4d69f6dfd3f82e7a93cc16c77fc367b2e00d1d243fb38cf2aecec6fb5293c9802e56d95380077ad16fb7a805d0d034b16d6","ssdeep":"96:0jZJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0FJTFyhlqTsd9fTOsy6Xd","tlshash":"dca1a7a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fbd084d4df299","first_seen":"2026-03-12T16:55:22.863037Z","last_seen":"2026-04-15T05:45:13.346744Z","times_seen":7,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 07:10:32 GMT","end":"Mon, 06 Jul 2026 08:10:21 GMT"},"fingerprint":{"sha1":"06:77:9C:BF:15:1A:42:84:8B:21:3F:98:BA:F8:B9:08:AD:D4:F5:CC","sha256":"68:3A:F0:F2:ED:51:CC:6A:2A:CE:BA:F5:65:BC:A7:DB:FC:D3:77:F7:6A:B3:AA:01:B7:7C:00:C2:DF:A5:4A:2C"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: 9ec88aa67e9423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-04-19T08:38:14.465769Z","times_seen":283,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:34:40 GMT","end":"Mon, 13 Jul 2026 21:34:15 GMT"},"fingerprint":{"sha1":"AE:4F:5E:10:CB:3C:4F:D6:73:C5:23:2F:62:7B:FA:80:D3:7A:0F:8E","sha256":"E8:13:EA:DC:CE:03:48:CB:A7:27:05:82:61:D8:EB:52:40:1A:85:2D:B6:E8:D7:03:AB:55:B8:0C:53:CE:CC:2F"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/\r\nOrigin: https://poloniexexchange.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:27:31 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9ec88aa6dd1c569c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18173\r\ncache-control: public, max-age=43200\r\nexpires: Wed, 15 Apr 2026 17:27:31 GMT\r\nlast-modified: Wed, 15 Apr 2026 00:24:38 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbf39dceeefd4e7b837a0d5954c94910","sha1":"4853dffc66c53275b73fb2219ed5723a5d6831d6","sha256":"1627d4121b7cb00b96ee320b37893b30d6e0a2e89f93a21bc43522e9599b6bbb","sha512":"86fe88adca5689e8c3ceeadbdb61ae7ab42c6ced4756256d278f0d151977ddcd3c1f9b5b1444a87fcf258602d04b866136aa339d83f4342dae002de9eccdeb0f","ssdeep":"","tlshash":"5290025138485e1cdb491c59f04a7a52604c149324100f7590c05b0446a44361700474","first_seen":"2025-04-08T11:31:59.266604Z","last_seen":"2026-04-15T07:13:33.793905Z","times_seen":50,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/purify.es-ee0e7e34.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/home-87506211.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-559f\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpZvlDwrOmfDbfNZ%2BiGZuBYWenv5cD2fqzdJqjkiXXd1LPCgkZRwXp5ZJsIi4%2BmFEmgdJg2nGjNjKYxMg6O%2FD1%2F%2B7%2FsL6uP2fzaAhp0IpumSKg9aTdf%2Biog%2BuK7U89A2nLfXcshW%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9ddbb356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-04-15T05:45:13.293378Z","times_seen":34,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-dc6c0f23.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-dc6c0f23.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-b3df\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUDJIXzIvjrDnOhogtQdCjHs%2FpQdbjZhOkA9FRJlXDxfHek3HN0z%2FL8HCuNrZYkNORn%2FoPb%2FJBuxZ5pIxICe6R5xNRmJXIU5fLahM8Qj%2BUeqrqturUvwD0jOxELFGwEcj5EiWeLcaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f5be356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"34d4b40271d601275b4110dfeeae6f06","sha1":"8dc4be576be03d1321365f8e76eaceb6351ea1cc","sha256":"d6f2a417c26b0a4b457a8dfe02f13b7e478e6454b8698f7bec40706985576454","sha512":"eeed29ae3ed96b20ec5f0536081f1fc3a68d989c4c621178b9d467b034aac1f443ec12e5cd864d939d4d37fdad5d2f35bbe42586ff9fd31595e70738f9b09169","ssdeep":"768:1PYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:9+qIzcUWb67sHYbzyER","tlshash":"3723b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a719b1618edd6bcda","first_seen":"2026-03-12T16:55:22.83672Z","last_seen":"2026-04-15T05:45:13.362208Z","times_seen":7,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-1d08d906.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-1d08d906.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-127e\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kg6%2FJNixxgWXDSTCNjzfjEPLSNJPWzF272Eh341O4tzN8KLYuCeQzCB%2FDWUa2h7CpU8ZaIvqqI4R2ebGCWqXO3UAY9UuJAzvKMpBwgGU4%2FKhDQft7hqtZGCh7drN6BVCI4k5YPt%2F0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa15c1256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"4aa99fee6dafdfa0ca721935abeb1b6f","sha1":"ff87b575043779474c18a9edfb0884bdd35ed14a","sha256":"8e96b3d61ada813ca5d45f205022f238f7c3cac56ca5fbaadae85738b1fac16b","sha512":"ac5dabec749cbdd5e92ea0f27b1528304103d15c73938786664db42597383b01f8d48e014bb228fc1ee4a33ca7da820a13006e48956851d531e348944a4c1e12","ssdeep":"96:WXs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:Es7o9KK8ZMY2vcpaC5c7eI","tlshash":"3aa144c22daa252a3951d099ae5b8910e322c007d21dcebdb9dca1fccf595c3107e722","first_seen":"2026-03-12T16:55:22.857337Z","last_seen":"2026-04-15T05:45:13.345845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9e1633c8.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-9e1633c8.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/static/js/send-e4234d39.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9cf\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahCOtHOEe7spq%2BRvPYJayETJkuHcOcpJxwxs07oTnViIHVlfNs7BbQ9ADro%2FLvnE87iCOVCDX3OSLADK95UqSG%2FayAJCMzZUpaXvCFNkMpR3685lPnCFdGpiY%2BwZIS5CDkxx3S7FSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88aa16c1756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"f672dbeab2a79f477b63594fa5edb68f","sha1":"ce196a3702377e096b4681df1e2f7fa2c1f8a220","sha256":"92dc11e4d87dd1f996a4ef6906ba9957b4d852c53deca6368fe31f3289e2722e","sha512":"84a9780466f75eaf8274eab8307b6e1755fdaf43b08f844b7fe96597f04d59ec3d1eabd29ba638c33898e8d44d79859b3a8750dcfec241173c32dd561a654e6e","ssdeep":"","tlshash":"c9512e85b213a8f7386261f9069f9315662438120aacd62878dca596cfce7efa434123","first_seen":"2026-03-12T16:55:22.860481Z","last_seen":"2026-04-15T05:45:13.28835Z","times_seen":7,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/etc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/etc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9FNMi1kzfEiKT9iYimNRRkN9y456zKcTkgflo3rCHPuLz9b+IwCu5faq339le7G+cH5VAhBQHe/nPRt+xhnBoSsV2h8vvcTk\r\nx-amz-request-id: X7P93XRTCP3949RG\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:13:40 GMT\r\nETag: \"4d1ae380cf58756cdffa30d1bb8abd5e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 601\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":601,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d1ae380cf58756cdffa30d1bb8abd5e","sha1":"38188275c01e813500aab047a10628a3b28ff103","sha256":"f2e32deb992dd8def5892b09e4ef7df9141adc688e366086c145c41c3e9220c2","sha512":"096959d58264b7a54821888641c50d3d6b6cc08cf4fb3809efb7e8f8dce45e8adce57d621dc95c5ae21404cc579b725094673189a50ec1e081c31e91ea848492","ssdeep":"","tlshash":"3af028a9e2644fa1b602d32496a8e87931261c9b3cc74451a1dd52299310ddf9f3cada","first_seen":"2023-06-27T12:45:43Z","last_seen":"2026-04-18T15:16:20.979745Z","times_seen":217,"resource_available":false,"data":null}},"time_used":2757,"timings":{"blocked":1230,"dns":1,"connect":276,"send":0,"wait":296,"receive":0,"ssl":944},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:31.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 30Gldd+ioMj0+LF1Kpnsc+sho92Y+A4jpRDHLuAnJXNKRcGgQfGtr6biY0Fr39lxkIi+vCjWxk73pkPiQJ/H78RNW4BxRqaI\r\nx-amz-request-id: X7P34BB3H41C5RTA\r\nDate: Wed, 15 Apr 2026 05:27:33 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-04-18T15:16:20.962399Z","times_seen":555,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":1487,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-b0558491.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:27.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-b0558491.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poloniexexchange.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-31d37a\"\r\nexpires: Wed, 15 Apr 2026 17:27:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35J07FjsN9XC%2BkDRzb7HNPM2Dpf1b2BiZyj8%2BU3mcGijxjEubyZ%2FTTzWhkKq1updeUHBpHIM54J4KJDZcwvOgcutUVe9wOdongM5oX221qXlzhKNb5AQ3AR7r1Y2uJy5AIbkcNhPzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a8b7b4356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3265402,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a9925bae3d0cd0eca89d91757a97c39","sha1":"c6ad26bcbe58efdeeabf0a15a8affc8a8473a9bf","sha256":"b3de2fdbe527adf15035af6e8ba4267529b6454e2da739a31003aba53f0273a2","sha512":"f02f90f130f4462cb76d72b08287c6669be75b4bd7c80bd5e1a72f6eed1b841674e4eccd5fc9ee16cab807b8ec866cc46e0e5567153cda28bc455f96c7c0dc1d","ssdeep":"24576:fzUmhCT1bqfFfIy2aB72+Go/PDXg0sw0ERirdxQR1lSVZWUF:fzUmhCT1befIy2E2+Go/PDXg0sw0ERiv","tlshash":"3d457d90a2cd27be0363954df08a2205f5bc4cf7a59ac25559eced2d32e6814d3edb38","first_seen":"2026-04-15T05:27:57.326348Z","last_seen":"2026-04-15T05:27:57.326348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/purify.es-ee0e7e34.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:29.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-559f\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rl%2FBmLzip%2BR435sN8P2erM%2Bic0fncKCPXQ70oIpOCRj8Rgs7vlleR85FFzKsr2dbwcIyGcy9nkX5S3UemmZWlk%2BnNILnZnQ539thVJTDn%2FGee2vwBV%2BjIZr2xEwroD4TviiaqIrGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9b2b9856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-04-15T05:45:13.293378Z","times_seen":34,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/index-9e1633c8.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/index-9e1633c8.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-9cf\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyAqa2lwz%2FBpBgTq2fVmMXnSdlO%2Fn8sZiSxHnJuEb3icmoZIYIejrWz9G3pCFQVoCvji8YQ5VB35KZXSYLGeNq%2FrEsRowAIN1ceJA3CWTbPGA4RL2ccp0P5mvTpZBSobV0ANr%2FQeKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f1bcc56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"f672dbeab2a79f477b63594fa5edb68f","sha1":"ce196a3702377e096b4681df1e2f7fa2c1f8a220","sha256":"92dc11e4d87dd1f996a4ef6906ba9957b4d852c53deca6368fe31f3289e2722e","sha512":"84a9780466f75eaf8274eab8307b6e1755fdaf43b08f844b7fe96597f04d59ec3d1eabd29ba638c33898e8d44d79859b3a8750dcfec241173c32dd561a654e6e","ssdeep":"","tlshash":"c9512e85b213a8f7386261f9069f9315662438120aacd62878dca596cfce7efa434123","first_seen":"2026-03-12T16:55:22.860481Z","last_seen":"2026-04-15T05:45:13.28835Z","times_seen":7,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poloniexexchange.vip/static/js/ExchangeController-66fe4177.js","fqdn":"poloniexexchange.vip","domain":"poloniexexchange.vip","tld":"vip"},"ip":{"addr":"172.67.166.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poloniexexchange.vip/index.html#","date":"2026-04-15T05:27:30.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poloniexexchange.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:16:40 GMT","end":"Tue, 07 Jul 2026 23:16:28 GMT"},"fingerprint":{"sha1":"11:00:8E:2B:EB:00:C3:92:58:1E:62:07:41:D4:CA:4B:FA:8D:75:D3","sha256":"2B:CA:DA:89:83:4F:CA:23:57:DD:AB:14:E3:6A:54:6D:FE:32:D6:0E:0E:69:3F:6C:57:1D:DB:47:5D:72:6C:58"}}},"request":{"raw":"GET /static/js/ExchangeController-66fe4177.js HTTP/1.1\r\nHost: poloniexexchange.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poloniexexchange.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 22:18:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af4728-1279\"\r\nexpires: Wed, 15 Apr 2026 17:27:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M902EapHlrOa9jKC4hYA5eK2zGsFVlmZLhhjYPVloDj75x2C6Y14WRN6MdYU2BXfQUOJv8uhuO5Gn1LK9Bx6Fwo7d%2B1j1kT5LpUqoCD%2B5kJiUEBQwKQvpJM0pEPIIpy5ORmauCUXig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec88a9f3bd656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"8ece541558d1cfe3bbeb5d8fb963eea5","sha1":"0ac08983e14232d9e44be93da349f733d71935ee","sha256":"a661fb2f90f3b4cb26b0e1e2d1c55d750eee336cdc4aa4b6f0642ba6e5343800","sha512":"a33fd7000850094497467ce746958f79f66f790bca9ea329b0fd368b9db809a025b61b787a893988cf4e32f8f54170c3c1a000ba5b0ba8a520f8f26099d84fc9","ssdeep":"96:RvPMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvPM1gE2k+1ei+NFnopzo2Vvh","tlshash":"e5a19600b0f2703396d929a025752520cb6d4fe9a467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-03-12T16:55:22.810504Z","last_seen":"2026-04-15T05:45:13.324871Z","times_seen":7,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"poloniexexchange.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}
