{"report_id":"97088c27-1846-486e-a714-457387026efb","version":0,"status":"done","tags":[],"date":"2026-07-17T15:22:16Z","url":{"schema":"http","addr":"btcexjtuas.com","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":0,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"title":"Btcexjt","dom":{"size":28947,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22488)","md5":"a486aed63ed86e1762fcd31cf845b5fa","sha1":"b281385a05eb517f11fa02a42807f390fda0f6cf","sha256":"846d38e9a982f1b68c15c3e521476f8f9deaf4712679e0f183b90b3d021e2aa9","sha512":"504bf649c194a555abb10e56f8ba06735c9cac9c65ea9ee0b4bf92e35e4cbeca3b96d562d27e05751077399c2eaba84ddc947d2caeacd2132d0ee73a19f89b40","ssdeep":"768:gnOsA2nbJnQxQW2JDg4A4O+4De4DuxbTNnNtmiuy/lsAQGAUzGuEKdUc9XoGu8Ex:gnOsA2nbJnFWUDg4A4O+4De4DuxbTNnI","tlshash":"50d224b1e0465aa282fb9dc1e5617e2e76d2f30f8116c9803abcd58a1fc3cf5f961464","dom_hash":"domhash2508cd292c1a57fab1bf042db8387d6b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btcexjtuas.com","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":0,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T15:22:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"btcexjtuas.com","ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":2671523,"sent_data":12689,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.kraken.com","ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-04-03","domain_rank":854257,"first_seen":"2019-10-31T16:08:46Z","last_seen":"2026-07-13T14:08:47.997874Z","alert_count":0,"request_count":9,"received_data":104745,"sent_data":5006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heco.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-19T02:24:37.940355Z","last_seen":"2026-07-13T14:08:47.909575Z","alert_count":0,"request_count":16,"received_data":1951735,"sent_data":9070,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"webapi.btcexjtuas.com","ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":11,"received_data":10489,"sent_data":6008,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"btcexjtusa.com","ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"domain_registered":"2026-04-24","domain_rank":0,"first_seen":"2026-07-17T15:22:19.786681Z","last_seen":"2026-07-17T15:22:19.786681Z","alert_count":20,"request_count":10,"received_data":174946,"sent_data":5182,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btcexjtuas.com/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff5afce542f06020b1024beba67a1ca","sha1":"8232c628793a03b8c10d9d2535a156d3dc75cddc","sha256":"8d67b160ada0ec5c057d46a46c20ac8b31ce5708e2451976c06c1a3afd60b881","sha512":"651f6e3c61ecdacbd05ae0d9c43b2c65869fa53a35a57474c03ef60618b148988eae6bb16b93f1cc64b38bd24a78486bffa947e73458fbc5f53d94d6f2a50c80","ssdeep":"","tlshash":"7e116bfe191a612a6303404e976b7911643660e9401a185173cc9b9dbb9abadd0cbb8d","size":1034,"data":"","first_seen":"2026-07-17T15:22:26.666017Z","last_seen":"2026-07-17T15:25:04.475883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-18T09:23:15.294231Z","times_seen":40154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-18T09:23:15.294801Z","times_seen":41809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-17T15:57:22.479265Z","times_seen":1041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-17T16:25:05.15716Z","times_seen":1355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-4971824c.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad315b75c8a2aa3f4b3928df97c62c88","sha1":"ef19e2aa55145ff1fb97bbba119b4e96e225c60b","sha256":"b2e02af084b0c2166ff77eb7f365eb3d3c76602c5866be4cb772b0d9d46543ba","sha512":"457600cd2741d3b0fd0c928d7be2d7cddfcba4eb37f7e70e54ee211c25ddeda0246cb4968912f87d965082484dd77655621b0858b7c2bcc17d6797cf9090927c","ssdeep":"384:PVmTu8DiFFPFgSmfUxUDgx/lH1ZuJh/gw2Gm43HC5fBWKSF:tF37gSmfUN4oGm43HC5fBWKi","tlshash":"f452c596f9069a3cf5fba85140880010762e7fdf500d89e2b8bd6d866752efcbb4971c","size":14017,"data":"","first_seen":"2026-07-17T15:22:26.650145Z","last_seen":"2026-07-17T15:25:04.451574Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/en-24bed9dc.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e722c2fd8e35dca19c2cd2685b8eeed5","sha1":"bf250cbe4d4c4498baef6b67b9a1bc9394f586c4","sha256":"bd8cf5641d6e06c096f5e155526cae0483357654ddb4c3b7f40669cf64f6f574","sha512":"83596db4645625c38e31912f78b7405426bc90d8217e76eb870cc69c603daff6b7668f8593f07af33089d4056bbbb3c5f0c2aae3723714eef8249a50aa4513c6","ssdeep":"768:vHWvMI8mfW6fpaOh47OQA1PxDR+6oSfRHOpZcEw/oPrs55v2JzLLWz1DagXa:vHcF8QPFPf3poTsuJzLLWz5aGa","tlshash":"2713d7897e1a989a04f3537674ce6e1120f60ac28255881f4fedc9fd53d2b67a363b34","size":41639,"data":"","first_seen":"2026-07-17T15:22:26.608532Z","last_seen":"2026-07-17T15:25:04.452457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-18T07:25:40.652432Z","times_seen":1589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-17T16:25:05.141698Z","times_seen":1697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-17T16:25:05.148777Z","times_seen":2051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-9140188e.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3bc76146cb6521ae54877df16b65a3e","sha1":"c100d913e8f8c978a1be07c2821ce24d5bb00310","sha256":"900578222146190228fba476bf45691ace25e52ab7ef9822ef808cb3e4df3709","sha512":"4b4090fe1ccd5fb18bbc3830a89121cbaa36e309378c411a16391fff6c671a6dc8feff02b20483c77daf320a35c5c4c7c726c694666277554a2295fd8bdde73f","ssdeep":"1536:0+E/+KgZKITLfQcA01OR94HSErVkKq+TNHDI1IHV1:JTKgZKIT0794HSErVkKq+Go1","tlshash":"fca35c9e540a1fff5dfd0d08799a891021e82f83588ccc9373ae6e5927f6cf42289719","size":102402,"data":"","first_seen":"2026-07-17T15:22:26.597605Z","last_seen":"2026-07-17T15:25:04.437966Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/vendor-27943b52.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa015e144b5c9ff5941aa3da431c7448","sha1":"811f57ad1a1d863a6e108e951fa873b789dcbdab","sha256":"c07b2afecca21cf13570b6db45f8f2bd14d409348bf35bea29cd5bebf394819e","sha512":"bf1e14b89a5aa25ee1b0e7e3d0b24243e3b18005971219f47c41212dd49e87bf5550e66642f7375cefd017e58bb8220083aecb10d5fe85e72f560ee1de4f9e64","ssdeep":"12288:WBIeWkKlYRnK0Asm9r+0LwY0tv68WNnDigQD26CWr1TVqVMpjkoKi:WBIewgKpsf0LwY8v6Rd56CWr1TVZkoN","tlshash":"a3153ac97692f06147ab20e240bb0006f33d6e59740e8494f16999eb7d7ad89d2b7f3c","size":929393,"data":"","first_seen":"2026-07-17T15:22:26.661296Z","last_seen":"2026-07-17T15:25:04.447897Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-17T16:25:05.141038Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-07-17T15:59:01.113412Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-17T16:45:38.341872Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-1daaf918.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdfe42a3c9ed80c67eda0c2ff497ed9d","sha1":"313023589e60311192ae6307b79ee000d1c7600b","sha256":"1fb6b3bd98845f8b4c5c0f94e6f6e2bd68ded61ebf260333af0bcd0cab94cb91","sha512":"a3c93f62ecf791d991226f0eb4cb3422188d7bad65ffcbac87597b5fa62ed48380f5f3ab924900da62ff27d0a9d6cd7e547907257b3a5282523d8c0ed1946df1","ssdeep":"","tlshash":"a101fdf9fc0d8ebb0ea20a4002a0260014491fddfa1419f198867d6a1be4950d7ce32d","size":776,"data":"","first_seen":"2026-07-17T15:22:26.619736Z","last_seen":"2026-07-17T15:25:04.422517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:25:05.145108Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-18T07:25:40.654122Z","times_seen":1341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-17T16:25:05.147922Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-18T06:14:01.126217Z","times_seen":6792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-17T16:25:05.1579Z","times_seen":1705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/charting_library/charting_library.min.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-18T07:25:40.634263Z","times_seen":1218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/filters-e9047a60.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35577a826a3059adc0c758e209e96fe9","sha1":"b2c858d651a925f315df1d06d06c1f48e84fc614","sha256":"1438c70b4bf4a191dfd9f6ef5d806c2d23c3ba87b250a6adff05ee16216a9dc3","sha512":"1614d338791c95d73e237a392c4e1fc11df45f2c2039712c5cb541c50b29fd4497b13ddcaf48dffa7ffe6d4b0da10239386e1d3787d28a03b5d8e1e1215d0ed1","ssdeep":"","tlshash":"f96114edfcd7613746fa6ae90028455172ceae20785e0e49f58bd045597388ce0bfb64","size":3448,"data":"","first_seen":"2026-07-17T15:22:26.646202Z","last_seen":"2026-07-17T15:25:04.472502Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-17T16:25:05.142269Z","times_seen":446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-9381f3a4.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f643c39e28a65ddda93b1b5844db436","sha1":"2ddd2312a127d4778a887c3ae52273fbf5dc0fb0","sha256":"a5e71ec69e1e4db4870aa6e7671cde949f17d7ab1788eaeb1d3b532192ed164c","sha512":"9fd7c24cefa08cdd1f2b011e3bbcebf4dcfd2df439a15fad2b2d92963aadd9144a358a5c103495730d74c70c34554b54303f07c46ff06a0ed9f3447424daed68","ssdeep":"","tlshash":"7cf0c96fb96a80b21bb388e8a1630820ba181b5a2754c4a4d4c71a14c7748e7e16e214","size":510,"data":"","first_seen":"2026-07-17T15:22:26.603118Z","last_seen":"2026-07-17T15:25:04.43183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-18T07:25:40.656547Z","times_seen":4330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-17T15:57:22.469392Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-17T16:25:05.153186Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-c9cc67e9.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7467906224b372f579d040e3adb3826","sha1":"6b5540ca06bf9f873bb6eddd013145b1d9b5d65a","sha256":"db47b5fe11b138253b71ce98e66e357cca9cd851c125caab2df70b75739c2bb8","sha512":"7647084f4f08a9adadadc7014f1021c5faf8eb31c17e55fce3b314a35d4170413bdf1339b2240cd1477096b425afe1104ff7f3961e4a604fa08954cad59634ec","ssdeep":"96:Cgd+vQt9Yj5ZqD+wSdzQ5ytb/3tiL9qSAB3hPq3cd4oyjT6:n+vQPYjXqiwSpSytbPwRUBhiC2T6","tlshash":"18a1c99cf80245f9d97354455458002121cc3bf7f1988cf6f7bdac4967b8a79d6d4362","size":4856,"data":"","first_seen":"2026-07-17T15:22:26.618239Z","last_seen":"2026-07-17T15:25:04.458174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/currencyItem-aa794a24.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b15b4d1c6401e2c542badda68da246","sha1":"0cafbccc81494a296293b1061733ec0c9aa2a71d","sha256":"d3c44c254991c23261cc7fffb926f645974016509dde1b9160c2bbba2cfd7d88","sha512":"c0d1b27582e4e9f0737e75d25d786a7fba6e916ebde6b95dc95de722051b166726d928e0afc1fa13e36cea556b7574486e11e629e027f7e4a970b664605c4515","ssdeep":"","tlshash":"fb21af9aa902c7b1cbbe556281bd5414170d7fea701185c1ebed148a37876fcd728a31","size":1206,"data":"","first_seen":"2026-07-17T15:22:26.663021Z","last_seen":"2026-07-17T15:25:04.433936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-17T16:25:05.154556Z","times_seen":1041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:25:05.142773Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/#/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-17T16:25:05.150146Z","times_seen":1586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btcexjtuas.com/resource/svg/light/zu447.svg?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.523Z","timestamp":1784301711523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":860,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-17T16:02:47.905424Z","times_seen":438,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_iota.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.536Z","timestamp":1784301711536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_iota.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12388\r\ncf-ray: a1ca3d213e67b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"6314ddde307b63d87d9386e79a25c440\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:00 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=uc1CvVo.swtEEqcBY1hyY.8HQz4KWS727rAMpm3ogos-1784301711.5587652-1.0.1.1-TyuUnP_XRygNy8kCOiiBc1K8YkAlZS1YHn.Eexa5VyC6cIvCXl1u6gE3iOBeQt90sIYNsIJl8HCCcMd2CJGtZcfGNZstZ1vqtTfmIW_6VV6PUZIf4Gt1qTgj_ltw4JBn; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12388,"size_decoded":13262,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6314ddde307b63d87d9386e79a25c440","sha1":"773a7debef0c9dbce49006c9218c878eb9294d50","sha256":"56ac72f9a1690a1319fa09aae8ecc28c10e47598b0ee24c82b541a89d1527fda","sha512":"f980fe41afb167824095e0b153781b3e4405777b05cb530f7f4705e3dc31d3605b2640ee7bc9df008a20ff6727218dd40947d87e597e3211c9a5abd07a82afc0","ssdeep":"192:/89NAY5SmzbZ0KPwO2TiFhnfxdFuki9PZs0kvV5uST5EjDzlAVU3IQcSyJAnGpDA:U+mzRP/2TehnbFb1fmjdAijWZG","tlshash":"1842c0718791b5a7bb3c8453a751c85a52872214840bac13f278cfb3a3dbb19ee70ed4","first_seen":"2026-07-17T15:22:26.576588Z","last_seen":"2026-07-17T15:25:04.445088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":158,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-bc011be9.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.640Z","timestamp":1784301709640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-18d\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":902,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:25:05.118037Z","times_seen":1399,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.539Z","timestamp":1784301711539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8696\r\ncf-ray: a1ca3d213e64b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"d4c32cdcbbe93620061421c9dea94fb5\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:07 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=dEiCf9e3mUFXGxfMv2cmGq63zrV9LFxXTxYN5YjkYbk-1784301711.557852-1.0.1.1-GIh1oK1WbanowlJ05Z9Ab593V_JsN86oG_T3XqizIxZaqvKKlISFISjGW5tUDEoLy9hoA9F1_osELBNot79LcHBO8t7.C8mi4N7IgDZxLICs5e7nG3x_xTyuEyrGQmMC; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8696,"size_decoded":9568,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4c32cdcbbe93620061421c9dea94fb5","sha1":"86b7d8bfcadcf29dc15e04ac27c6fde87dff4037","sha256":"d8e22a4ffaddf6d0ac9a800f58e91a0568b42b7b950ed433acab3e6b54d298d1","sha512":"7e689ce4701f9b7934003689d6365157b34be9be1f94d216df6ffe458179c4428740f75fe17d2575acc0d33fd9ffc680924eee33396bbb2141d3ab044221cf3b","ssdeep":"192:e89NAY5SmzbZ0KPwumFLowvjvYXYN6G+jqe7R0q3YShNSGwp:T+mzRPNi7d6lNYwNSGwp","tlshash":"5102bf17c5a6e7b51e48c4a70c40942fc33a9020694fad28534c9c5bb33dfeeddb1899","first_seen":"2025-09-18T10:45:14.114732Z","last_seen":"2026-07-17T15:25:04.432712Z","times_seen":6,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpe1c528d1dcd64423a69e1500717852bc.png","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.553Z","timestamp":1784301711553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpe1c528d1dcd64423a69e1500717852bc.png HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 202197\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891CE63A83634D8FB81\r\nAccept-Ranges: bytes\r\nETag: \"815DE2BA85CDDC9B0A1EE21D33B4904A\"\r\nLast-Modified: Wed, 25 Feb 2026 04:19:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 996964040500719874\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gV3iuoXN3JsKHuIdM7SQSg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":202197,"size_decoded":202772,"mime_type":"image/png","magic":"PNG image data, 423 x 420, 8-bit/color RGBA, non-interlaced","md5":"815de2ba85cddc9b0a1ee21d33b4904a","sha1":"51257950a766a88a691d49f9925e478871406646","sha256":"c56d75259e8aa9cff489682e0169187e21b6c742f256bfcc11253e43a2e0e2bd","sha512":"c1081671b364dc91bca38627f83fc9b82650f02547b61be2f71f9084113ce439ea0275296402a2818aeff71361d6b31c21850a8d0717645c8d2993da7e12f855","ssdeep":"6144:fO1rKVC1nFFbR25/hEvvvLezV89amgPxunOkBFU3F:fcUE3R252vvDmVgln1BFU3F","tlshash":"99142380fc9d5546ebb19854e2d6dfbae7c95fc13e6c061230660c48c7aa8fd412255f","first_seen":"2026-07-17T15:22:26.583966Z","last_seen":"2026-07-17T15:25:04.473333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2490,"timings":{"blocked":1947,"dns":0,"connect":0,"send":0,"wait":282,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/platform/dev/config.js?1784301709598","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.613Z","timestamp":1784301709613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /platform/dev/config.js?1784301709598 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-18a\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":913,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-18T05:40:53.769114Z","times_seen":469,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getMt5Amount?coin=xau","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:50.650Z","timestamp":1784301710650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:50 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gw9bcm2Sk1dnEfahodlkqNZJozHYWe1f9TLzvxa2k41ahUKLLn3pGYszeVAEtB7YgLQmY47igXhUDuBIhjC8X5do7nVuqxnJGA8Xl53t6zHe%2BIQxUCzaHo34JRABcwH0BgHmNPaRCSU%3D\"}]}\r\ncf-ray: a1ca3d1b9b194e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":932,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/resource/svg/light/zu29.svg?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.522Z","timestamp":1784301711522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-17T16:02:47.958375Z","times_seen":909,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/btc.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.524Z","timestamp":1784301711524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /btc.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-4907\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18695,"size_decoded":18889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e0bd679cd8e0e47b99f9a57e1630eab9","sha1":"84f1e2c0677e05aaf4eeca35b082d45b918cd173","sha256":"6e66685f018712ad59cd51776efe995ce8e2de1e54b5284b64a7c5ccae9619f2","sha512":"8762c700d86a07d203379f83ee795016a83f22a858026e42ae5af47d87bad7f023196abf5b2c57282a461b5158a8081a189765580d29561ab34b58a936941aa9","ssdeep":"384:oa8lUgPlQEKkx9BM6eHr0JaxCHsC/jWdEti7b8Jmn3qCmPBvEip24:ozlZ9NKW9BMv+/jWdEts8Kmzh","tlshash":"9782d0f3f91a61bfd87a03b94582bc26229b79e22b989d4d248015c84de88cc51d3d5d","first_seen":"2025-06-19T02:24:45.865315Z","last_seen":"2026-07-17T15:25:04.459416Z","times_seen":3,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":11,"connect":87,"send":0,"wait":173,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.546Z","timestamp":1784301711546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 244944\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891EE240031373B0870\r\nAccept-Ranges: bytes\r\nETag: \"99541A4058432FC8B2DF9AD26D6EEE3B\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11562487344152512719\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mVQaQFhDL8iy35rSbW7uOw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":244944,"size_decoded":245521,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"99541a4058432fc8b2df9ad26d6eee3b","sha1":"689593ccf0b44704b19aa67f8d43c204801d5975","sha256":"be4ff66527bf4e4a48af64fa49481b6cca9864d9afe563630744a2204d7ecc94","sha512":"d67de09d3b9313f66a0513fd8a322362b3c2b6ad26466e687e81540a59e5ca9769d60ad33508047e08aa7cad9f1d70c71eb9beea508fd5cffdc67ae1d0ba7193","ssdeep":"6144:gRGn1e5WwkyFUwG1oChc+UBO95+eHQ+cBKVkeJLWd1H1f7POv:De5laHdJmO95+bObJLWdTjm","tlshash":"9134230ba890a155f8e07f5328dd5db719aa385ff7c8b158c49ea4e93522314fc7af02","first_seen":"2024-08-29T18:12:05.90357Z","last_seen":"2026-07-17T15:25:04.445934Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2677,"timings":{"blocked":2307,"dns":0,"connect":0,"send":0,"wait":277,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-9140188e.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:48.906Z","timestamp":1784301708906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-9140188e.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 04:47:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a489046-19002\"\r\nexpires: Sat, 18 Jul 2026 03:21:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102402,"size_decoded":28284,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"c3bc76146cb6521ae54877df16b65a3e","sha1":"c100d913e8f8c978a1be07c2821ce24d5bb00310","sha256":"900578222146190228fba476bf45691ace25e52ab7ef9822ef808cb3e4df3709","sha512":"4b4090fe1ccd5fb18bbc3830a89121cbaa36e309378c411a16391fff6c671a6dc8feff02b20483c77daf320a35c5c4c7c726c694666277554a2295fd8bdde73f","ssdeep":"1536:0+E/+KgZKITLfQcA01OR94HSErVkKq+TNHDI1IHV1:JTKgZKIT0794HSErVkKq+Go1","tlshash":"fca35c9e540a1fff5dfd0d08799a891021e82f83588ccc9373ae6e5927f6cf42289719","first_seen":"2026-07-17T15:22:26.597605Z","last_seen":"2026-07-17T15:25:04.437966Z","times_seen":2,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.543Z","timestamp":1784301711543,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A48917CD23C3236F87392\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-07-17T15:25:04.428484Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2591,"timings":{"blocked":2229,"dns":0,"connect":0,"send":0,"wait":278,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.555Z","timestamp":1784301711555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWTY8mUK8ZTMeOXPo4HdFOru9p3vlZ2g0wwXDsJSVXmyDXenw5cIxoIHrmuaHhaGoWduKKzxyP8sY8yuI0UMGAPfSYfJX5gORZk3%2BxYoBuk0172Z%2F7TX6CEfktoh2%2Fak7%2F3Jjj0obKg%3D\"}]}\r\ncf-ray: a1ca3d213bfa4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/vendor-80659152.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:48.909Z","timestamp":1784301708909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/vendor-80659152.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-16c35\"\r\nexpires: Sat, 18 Jul 2026 03:21:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93237,"size_decoded":38263,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"4fe26c57d03cf57ee1611092bcb66c80","sha1":"468368a6ad61c94ca07df85661b7adcfa957971b","sha256":"80659152d90088c76cb8ac878756fef53a65da97906b8c2689196648314f4b9f","sha512":"da41a618b1068a7449d768abafbab2512c3675977aa9da9bb5fb1e2829864a31222068a5119a779b3b8c6f4ccbc2b0c548480d9f961d86fe80cc4f1f8a9d2f5e","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"8693d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-09-18T10:45:14.112232Z","last_seen":"2026-07-17T15:25:04.431199Z","times_seen":5,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-9381f3a4.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.636Z","timestamp":1784301709636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-9381f3a4.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-1fe\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":1029,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"6f643c39e28a65ddda93b1b5844db436","sha1":"2ddd2312a127d4778a887c3ae52273fbf5dc0fb0","sha256":"a5e71ec69e1e4db4870aa6e7671cde949f17d7ab1788eaeb1d3b532192ed164c","sha512":"9fd7c24cefa08cdd1f2b011e3bbcebf4dcfd2df439a15fad2b2d92963aadd9144a358a5c103495730d74c70c34554b54303f07c46ff06a0ed9f3447424daed68","ssdeep":"","tlshash":"7cf0c96fb96a80b21bb388e8a1630820ba181b5a2754c4a4d4c71a14c7748e7e16e214","first_seen":"2026-07-17T15:22:26.603118Z","last_seen":"2026-07-17T15:25:04.43183Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/eth.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.525Z","timestamp":1784301711525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /eth.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-42e9\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17129,"size_decoded":17171,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e6ba74ee7aca970e9729ea2a96258819","sha1":"f7279d910c0e2e0e79b6920d7fedf6d40821857e","sha256":"7e3f13eb845de91e75bb893260d9f5de5d392a6dea242ca541cd0bfa46f88f78","sha512":"20a69f200aa6d4a8995e6c4edb5aab429d40f404b3e5baa04822120f998425f5fe195e72cf0968f1af177defaae4887ba1f462716f3f598a1b2e19a04c7516f7","ssdeep":"384:cQaUXlJMaqqpzybjTydlLjO1hSY+6Sgs+ZHDZAl7vZ:8UXlWkuHAohSYj/sSHDuD","tlshash":"f472c0ea16f59193d29a0ff7af288dd5c557743a598f97cae9508806d0fa0b0fc3a4c0","first_seen":"2025-06-19T02:24:45.749988Z","last_seen":"2026-07-17T15:25:04.46021Z","times_seen":3,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":10,"connect":87,"send":0,"wait":362,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/resource/svg/light/mengbanzu13.svg?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.521Z","timestamp":1784301711521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":1062,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-07-17T16:02:47.914493Z","times_seen":903,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/platform/dev/favicon.ico?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.992Z","timestamp":1784301709992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:50 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4727,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-07-17T15:57:23.204955Z","times_seen":118,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/en-24bed9dc.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.120Z","timestamp":1784301711120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/en-24bed9dc.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-a2a7\"\r\nexpires: Sat, 18 Jul 2026 03:21:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41639,"size_decoded":13225,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41536)","md5":"e722c2fd8e35dca19c2cd2685b8eeed5","sha1":"bf250cbe4d4c4498baef6b67b9a1bc9394f586c4","sha256":"bd8cf5641d6e06c096f5e155526cae0483357654ddb4c3b7f40669cf64f6f574","sha512":"83596db4645625c38e31912f78b7405426bc90d8217e76eb870cc69c603daff6b7668f8593f07af33089d4056bbbb3c5f0c2aae3723714eef8249a50aa4513c6","ssdeep":"768:vHWvMI8mfW6fpaOh47OQA1PxDR+6oSfRHOpZcEw/oPrs55v2JzLLWz1DagXa:vHcF8QPFPf3poTsuJzLLWz5aGa","tlshash":"2713d7897e1a989a04f3537674ce6e1120f60ac28255881f4fedc9fd53d2b67a363b34","first_seen":"2026-07-17T15:22:26.608532Z","last_seen":"2026-07-17T15:25:04.452457Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.503Z","timestamp":1784301711503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1562\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4890ACF6C53437F09845\r\nAccept-Ranges: bytes\r\nETag: \"569A0DBD2FFA9B38F25CCBC8E6697778\"\r\nLast-Modified: Tue, 08 Apr 2025 17:35:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2778767496489567871\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: VpoNvS/6mzjyXMvI5ml3eA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1562,"size_decoded":2136,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 64x64, components 3","md5":"569a0dbd2ffa9b38f25ccbc8e6697778","sha1":"2b30ef6f52c6deb1da0ebdbb8bb0b068ace65d1a","sha256":"568a577fe1290cc61e1f99c712ae3ebbd973763c88961ebcadb4b41b1ead509a","sha512":"5ddcab2093fef6504c0777315e6f5a91fd5abbfe4de70773d355510fdaebb44a491e75cf576dd163742b516fd44392c0b2c60928406b782ea863ffc9f55133f0","ssdeep":"","tlshash":"9a314c439522b57dcd1304b5a8fe2a72cb037c0237f92c4f56c3a318d24b301284408c","first_seen":"2024-08-29T18:12:05.875464Z","last_seen":"2026-07-17T15:25:04.470332Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1394,"timings":{"blocked":-1,"dns":40,"connect":269,"send":0,"wait":272,"receive":0,"ssl":814},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_fil.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.535Z","timestamp":1784301711535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_fil.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10376\r\ncf-ray: a1ca3d213e59b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"7d825dc4491dd0a4b97bd92e0ce30fc6\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:24 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=OIohEeq_6G4BmF1XqpA7QWfv5vgrK318DJOTTkI7Ilo-1784301711.5557911-1.0.1.1-gannzKexlPYx5mBDlCYBK_IW0jMBkZ_hc.UDmsTI0cju9xAM5Eby87pe5eGbpoIQkMIHeRje7iGu8BVbe8qZcsxBgCYXMhA9NmnKVVeACdFaM4rZyGmhcBWvApY5EtbL; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10376,"size_decoded":11250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d825dc4491dd0a4b97bd92e0ce30fc6","sha1":"56cf5516c736b46055921198c5a838104ee724e4","sha256":"12d4d97086193b009ecf778fa83a11b88f358add84d89a06560d3cf2ba916d4c","sha512":"d5bd6497932b56573c54e6dcdb54cebc0997cbfd94f17650ff32a64bd7742b42ef897b0e6d67ec885dbf7e5bcd1ec3c9b73c2efc7c472f65c77478835909b767","ssdeep":"192:D89NAY5SmzbZ0KPwq4xcqOPBMlpnY5+FPmJePHZmy1tn8NPIo08ffADl:4+mzRP8t6BMlFWsPmJefZP1taIo0ufAB","tlshash":"b922c08e8390bb711ecc06137d52983118a642041754e81fb6eeca87f765d1e2dd6bbd","first_seen":"2025-06-04T17:05:58.568316Z","last_seen":"2026-07-17T15:25:04.436562Z","times_seen":26,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/dot.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.541Z","timestamp":1784301711541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /dot.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-54ad\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21677,"size_decoded":21960,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"3b09a25b3fe666c3bc2f63ec473597ea","sha1":"911f930787292f79573f49ae8e3b630582f03de8","sha256":"8de2938e4942481b72684f884744ee867dee9bd2fb5f5373663f8119aea546a0","sha512":"907b038619bb5aecc6f224b654b907145d62fb7f44b5a0b1dde5475748ac161484a321a73116ea6c7a48e8d344d4e38c5d845091a8b465d3ea970e497d7c8722","ssdeep":"384:9KyXEjihHrhAxfQGner0up1+fWaPK2DOEIcgoM3NnXD5fw2l7Y:9Kz/iGbuP+s2DoctMVJ72","tlshash":"e1a2d045b6bc871bc56a52341327ce5836e695402f868390a70e866c2c1cf9abdf46e5","first_seen":"2026-07-17T15:22:26.612863Z","last_seen":"2026-07-17T15:25:04.456623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/trx.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.530Z","timestamp":1784301711530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /trx.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-550b\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21771,"size_decoded":21959,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"64532c2e72b02b8b7efff747fe4dd64d","sha1":"6f5452a1a1d5822c0f47992e27cb6b4ff62b5000","sha256":"a4df7e1902478ffb14dd912c822f4205371b3e1e5ab1760614a95f2209e7084a","sha512":"15598146b71d0cb91e7596e9baede08da73af5feae0f594dfbf559048a2e74de2b51cf8a8f5a1397980e6928cd89d7056da176a273dc743234fea0519f6fcae5","ssdeep":"384:qE2ym/SACBh36o5HyoRIe609rzfUgjA+lV55IhTVV8trupKOHbPbXflSZxxDgD:qEJJPNlDztD55WTTYipd7PbXdsi","tlshash":"c6a2d01b1168a3cfc7319d3918ee01ace52ac4d27f1e2bec7490d2a66560794dfb902e","first_seen":"2025-06-19T02:24:45.829943Z","last_seen":"2026-07-17T15:25:04.435753Z","times_seen":3,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp68f42d74bbc14e628c681ebd23a7fd12.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:52.047Z","timestamp":1784301712047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp68f42d74bbc14e628c681ebd23a7fd12.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 87547\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A48907CD23C3236767292\r\nAccept-Ranges: bytes\r\nETag: \"20E0BEE18FF68E334036C14BFB26804A\"\r\nLast-Modified: Sat, 07 Jun 2025 14:33:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15839281543105551514\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IOC+4Y/2jjNANsFL+yaASg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":87547,"size_decoded":88123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x672, components 3","md5":"20e0bee18ff68e334036c14bfb26804a","sha1":"ea1cc52dcc8e826ef14b103450ee06694dc248fd","sha256":"ed284cf6278133043dc39ca619b1ba3a162fd1cf2d267cc264a953fccec94245","sha512":"bec600aadad03f7a69778d7522cf561c10f8e56b456c130e0dd6299519dc5411a60849a00cfecc093bdb496eeff337fb8b78dafd03574975ca1f639e284473b0","ssdeep":"1536:jnbvv5xy0HJXo5bDD3IFVUEFUhFNlV8MwebTuWAGuucZUXAGSyXeuxLu:/r5Jo13IF6E2hHl6MHHKucZYAGSZuxLu","tlshash":"e18312b6930812dfc911573082685839783cd0314716e6a3ffa7357939dbe95ba241df","first_seen":"2026-07-17T15:22:26.61609Z","last_seen":"2026-07-17T15:25:04.442384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1392,"timings":{"blocked":840,"dns":0,"connect":0,"send":0,"wait":280,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/resource/fonts/Arial.ttf","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.392Z","timestamp":1784301709392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btcexjtuas.com/assets/index-8872f3c9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047469,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-18T07:25:40.649488Z","times_seen":2098,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-c9cc67e9.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.638Z","timestamp":1784301709638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-c9cc67e9.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-12f8\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4856,"size_decoded":2646,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4849)","md5":"b7467906224b372f579d040e3adb3826","sha1":"6b5540ca06bf9f873bb6eddd013145b1d9b5d65a","sha256":"db47b5fe11b138253b71ce98e66e357cca9cd851c125caab2df70b75739c2bb8","sha512":"7647084f4f08a9adadadc7014f1021c5faf8eb31c17e55fce3b314a35d4170413bdf1339b2240cd1477096b425afe1104ff7f3961e4a604fa08954cad59634ec","ssdeep":"96:Cgd+vQt9Yj5ZqD+wSdzQ5ytb/3tiL9qSAB3hPq3cd4oyjT6:n+vQPYjXqiwSpSytbPwRUBhiC2T6","tlshash":"18a1c99cf80245f9d97354455458002121cc3bf7f1988cf6f7bdac4967b8a79d6d4362","first_seen":"2026-07-17T15:22:26.618239Z","last_seen":"2026-07-17T15:25:04.458174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-1daaf918.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.639Z","timestamp":1784301709639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-1daaf918.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-308\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":1295,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"fdfe42a3c9ed80c67eda0c2ff497ed9d","sha1":"313023589e60311192ae6307b79ee000d1c7600b","sha256":"1fb6b3bd98845f8b4c5c0f94e6f6e2bd68ded61ebf260333af0bcd0cab94cb91","sha512":"a3c93f62ecf791d991226f0eb4cb3422188d7bad65ffcbac87597b5fa62ed48380f5f3ab924900da62ff27d0a9d6cd7e547907257b3a5282523d8c0ed1946df1","ssdeep":"","tlshash":"a101fdf9fc0d8ebb0ea20a4002a0260014491fddfa1419f198867d6a1be4950d7ce32d","first_seen":"2026-07-17T15:22:26.619736Z","last_seen":"2026-07-17T15:25:04.422517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.545Z","timestamp":1784301711545,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126750\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891ACF6C53437599945\r\nAccept-Ranges: bytes\r\nETag: \"9D3DD62CB672561DCCCF81ED5C49A731\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14280964938837360927\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nT3WLLZyVh3Mz4HtXEmnMQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126750,"size_decoded":127327,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"9d3dd62cb672561dcccf81ed5c49a731","sha1":"5b9e5f09bf26ad485f0d5fb9e28eb174f065b744","sha256":"028e9028374f9ec529f0c565b90beb9cbfbf23eeb49c54f24c44e8f619fb2fa7","sha512":"6f2b36df6646a0f22dcb9e1cad3722cac29ae11a2af88d433c62d7f3b6d703a4a3f5aab65d6b777e4c80d9f96dcf09b28e8816249307c0c85a9673dd843f15c6","ssdeep":"1536:6VUlFXPlozlYC/nq4eJa+ZhiY07BFxyNrPhsWmTd8l9Pa8MVU33yCX7b/ZKzRvyS:jlFfIlYCWd3pSBHEiE2VA/hKzQMCS","tlshash":"95c312d38b6609acc01d1a3c8a63b3b769139218049d53a7dfb78492fb05b8d3c7259e","first_seen":"2024-08-29T18:12:05.893037Z","last_seen":"2026-07-17T15:25:04.441306Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1924,"timings":{"blocked":1334,"dns":0,"connect":0,"send":0,"wait":280,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getCoinList","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.634Z","timestamp":1784301709634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:50 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSYMRIc5FFAHjdXNzaPI5AdTPnp%2FNsil9ketU8e6Ona5Ftgw9UGbXy0jUWYemi1AiH8Dy6Fc4kA4V%2FPPUTVDbLz58kfrnwmPz%2FQtIKVoLxft%2BGQW7Be2z%2FcAmQwNGl6UKAQiTE7WxQY%3D\"}]}\r\ncf-ray: a1ca3d154a4f4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":940,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-8872f3c9.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:48.910Z","timestamp":1784301708910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-8872f3c9.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-4abca\"\r\nexpires: Sat, 18 Jul 2026 03:21:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306122,"size_decoded":66958,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"8c48ff763da379b74314963b13faaeaa","sha1":"6fa61f64b3de52ae46e479da03753cd99c6fd904","sha256":"8872f3c9cb18b0f178cfed93825d04aabe174d0cb547bb99460d29f5287ad1af","sha512":"61ad3d42d9ac15275a48264273fb5ecce443f10e03e9b84ce519412e441ff63ff4e2ba954a98fb4820db6d7cb06b06841d2ec55e83325677b6fb13da50d41e0f","ssdeep":"6144:nevxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05T5:ev1C9dZ8w71ZACkFDS3vyf58rBeV05T5","tlshash":"7454d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2025-09-18T10:45:14.128185Z","last_seen":"2026-07-17T15:25:04.425819Z","times_seen":3,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/resource/fonts/DINOT-Medium.otf","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.284Z","timestamp":1784301711284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btcexjtuas.com/assets/index-8872f3c9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73551,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-18T07:25:40.611987Z","times_seen":1666,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/xrp.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.526Z","timestamp":1784301711526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /xrp.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-15bd\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5565,"size_decoded":5392,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"07fed2e1aa3b93a393947e0d729f9ad3","sha1":"3ed49c3d9f95e23f83b151113406c528dde65198","sha256":"f97920e13f8ab448f03580ea9a2be8f72193340f46d2856e54a41d1bc365fc1e","sha512":"ab09141676ea42fb90d6cbfab99c6ebc4fbcfd0249cf49cec7358f5128c0fd90ad639ce582f6ac972d3a41e9f52e8387f68eeb5571624bb2965ffd090adde669","ssdeep":"96:1dgNMFPM14jKgBaHC05s5j9A422JytLd99q/O+UGmbH/A4ZQKC+UDkR:1dgNCG4mSaHn594jsByOJGSfQKC+Eo","tlshash":"89b15c31fb1862e2dc06073f554baf89274da902ba74e2a19966113bad093846a785cd","first_seen":"2025-06-19T02:24:45.752688Z","last_seen":"2026-07-17T15:25:04.471137Z","times_seen":3,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":10,"connect":89,"send":0,"wait":362,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.544Z","timestamp":1784301711544,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 255863\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891ACF6C53437869B45\r\nAccept-Ranges: bytes\r\nETag: \"8E2D0D68EF7B3099A4FB1061C0847946\"\r\nLast-Modified: Tue, 08 Apr 2025 17:15:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9272553010199676724\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ji0NaO97MJmk+xBhwIR5Rg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":255863,"size_decoded":256439,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"8e2d0d68ef7b3099a4fb1061c0847946","sha1":"34771929afc985fe955dd91402ca7a8ad95fbb9e","sha256":"bcbbd14dc00035f42df40f6a691ca1175d915f10bc9ca034c90e55d5ed666325","sha512":"52beddfce84fb8188e0a2e2d8e7d1c51f1b7611f1202105719307cc42af6678f1b2f41602f628d4f7bfa9cb99dbe1864638fe8538ca55d9384c55c6e61b023ea","ssdeep":"6144:NmiyznjkBNvPf7btuII7tmFgGexE/IDEl5/WuOy:NmiykBRluv7ISTEl5/Oy","tlshash":"294423d8b87278b2cbef0db49c59f15a3977606ca1bbbcb3395ca1da54324646c041ca","first_seen":"2024-08-29T18:12:05.902596Z","last_seen":"2026-07-17T15:25:04.440613Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2844,"timings":{"blocked":2284,"dns":0,"connect":0,"send":0,"wait":282,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-d253bac1.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.637Z","timestamp":1784301709637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\netag: \"6913e978-3d\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":564,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-17T16:45:38.313779Z","times_seen":393,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/bnb.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.528Z","timestamp":1784301711528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /bnb.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-523b\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21051,"size_decoded":21278,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d364a4660a2864ab0d03fb9fd9bf8e6a","sha1":"869d24d2055a64546a9df9b4e1ba913e339ed34f","sha256":"49633b06336e809ce467cd9b6f546998acf30e6ed04c3435bf8b75a68c5cc9ef","sha512":"e1a25c1f637215629783030babb5afb1e723a574793b97d4495b61c0e3295901351d26bb9c434491f3809dbf6f29083a239112970ec4ffbfd625e20de6ec72de","ssdeep":"384:qxS1qaGdxfOpEQAWel++bWipVh0UAdHF0Rj40xQQpuKcd9hnv:tAakcEQOQaWipVKdHF0SiQ3hnv","tlshash":"c892e1371231c679c7ef35bdb7370ceade068950f1bdc26aa11125c015aa265f88e8a7","first_seen":"2025-06-19T02:24:45.893066Z","last_seen":"2026-07-17T15:25:04.426916Z","times_seen":3,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":7,"connect":86,"send":0,"wait":348,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/sol.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.529Z","timestamp":1784301711529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /sol.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-250a\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9482,"size_decoded":9250,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"71a6dc304437a39b5379d9788799425d","sha1":"b56fa05ea6bebf2e2a975904d2353f47b02bae07","sha256":"7154615d3429ac6e3ccc6dfe1388495d0d294e7788684dfeb99db6392dc67f4d","sha512":"9de379ac28b41b3799b2ac9590565859e87f6007a81b4477faa7edda2db524db855f2fd60d0237ef12f1c0ce3d3599d108a34a7de27cec7f19cd3e0738c99032","ssdeep":"192:TKrB7smug7UDrMcekppVYj61nFEW7De7Vmvrk1nDg0D0vjXZ:T8F4pMj67EmOOrk7cZ","tlshash":"1a12afd43f5acf2bed7221755ccc54dd1a238e6cd3696677c74054e013272e4ad18d46","first_seen":"2025-06-19T02:24:45.840742Z","last_seen":"2026-07-17T15:25:04.439939Z","times_seen":3,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":7,"connect":88,"send":0,"wait":362,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_trb.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.534Z","timestamp":1784301711534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_trb.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6902\r\ncf-ray: a1ca3d227fa8b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"16b15363ca61be1848bc3bf9231b0e1a\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:21 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=KXFIMw9IRKGPeo3rVDDlFIw1dtUH3sQSTH3yh6IHiaY-1784301711.75625-1.0.1.1-gJZqi4_rlcqblsVE8B8ZofJK2owNuMYTdwM8gFHmFRzvVhm6qgmh4zG9MFahhuhtc3IMXR.bms6sVG5JEQtJZV3uZfj2FDxDgE0jXes2my9qjb2pIAc.M2ybQQDLlniS; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6902,"size_decoded":7773,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16b15363ca61be1848bc3bf9231b0e1a","sha1":"ab8571306d7a640bfc9203226b02b2a852b09859","sha256":"f54b15562cc3d76f34afb8412762786db73f38e8f2097eb7b523ffdae0e80d27","sha512":"6e73444c3f3beae399a652178992f8c48733be3260e10c71464fcbc379868fc04f5889d9653bfaea5a4f76b1fa72db44016835a039f4fe82d30fe90e6c00ea43","ssdeep":"192:gK89NAY5SmzbZ0KPwqErZzjfv125tyoup3VaoZfC:gv+mzRPBwv+tyL9C","tlshash":"d6e1af54c2e563d326e4c5c3b454681fa61c002a1157672bb692ce333b4dcde6d795fc","first_seen":"2026-07-17T15:22:26.631271Z","last_seen":"2026-07-17T15:25:04.427412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":157,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.548Z","timestamp":1784301711548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 112629\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A48917CD23C3236627392\r\nAccept-Ranges: bytes\r\nETag: \"0DAEADD93DED6B3C5DE34CB17C18387C\"\r\nLast-Modified: Tue, 08 Apr 2025 17:28:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13231990931681428578\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Da6t2T3tazxd40yxfBg4fA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":112629,"size_decoded":113206,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"0daeadd93ded6b3c5de34cb17c18387c","sha1":"17c2516cf0fe410cbf3abd29efe0081359ad0a1e","sha256":"be91fd0aa507b5779e9a0b38fabcc784536965a9f20bc1444343e584049d7e25","sha512":"882a4ef0f7d72e4903e51978ebcd7cbcbf3ab1f41ca7ede53212588e1c88db37e0b2d393fa0edc27ae63c7d4d9d910d845eaf88612ed3928038f68ea1d97f5fc","ssdeep":"3072:e0WEjagrkdEB58/3MQDPQiktwaKqAUkS61dm3LcL:e1sku4/3MLipa0IJI","tlshash":"61b302f2a3306546e0bd4570a3e69f7d875f0eb65046c5733829df7684060c4caabaeb","first_seen":"2024-08-29T18:12:05.895827Z","last_seen":"2026-07-17T15:25:04.471742Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2228,"timings":{"blocked":1875,"dns":0,"connect":0,"send":0,"wait":278,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.549Z","timestamp":1784301711549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4892AB67323835D44AB4\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-07-17T15:25:04.428986Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2987,"timings":{"blocked":2407,"dns":0,"connect":0,"send":0,"wait":285,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.549Z","timestamp":1784301711549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891ACF6C53437459A45\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-07-17T15:25:04.428986Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2283,"timings":{"blocked":1924,"dns":0,"connect":0,"send":0,"wait":281,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_yfi.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.531Z","timestamp":1784301711531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_yfi.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15086\r\ncf-ray: a1ca3d361c16b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"2f7b9cf3538c5bdaa1ea95c975ce15d2\"\r\nlast-modified: Tue, 03 Mar 2026 01:47:03 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=uE2eZAOuoBCC24vweJ33jCtF2gv59D9P.TSQwnj8C.g-1784301714.8937805-1.0.1.1-MOEKQ9_iZj6AYPeYKmQ97Z7gch1KpWk49Pm73PE3yunWb2LPznq53boXkaQ5DY0qDU784d39VHPue3cFLP1ZFIzoQ4g2x5JAZcGeSrWWD1Wi0U_XrXHX_v4Yz570wDiE; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":15960,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f7b9cf3538c5bdaa1ea95c975ce15d2","sha1":"d4c3de4d13c267563b6472e0b0a1e4c30402fcde","sha256":"c5ff67b2363b96bd09f8c6eba4bad64b4a0f58e64be284a93f42d39189025ec5","sha512":"3572fc7b8c636d3ad23d7373899b03dd4cadcc5a9681d80f8d0eb3a9ac1061c3ad7cffbd1c11e2e619e852f9b48852c541349b139ae6546d1196b525642a251d","ssdeep":"384:Y+mzRPplwLM6IMqq5zNHqfYZKAlkaW+rkXhqpj8WeE:5mlfwL+sB0wZKAlk1fqF8XE","tlshash":"e962d00cc59292f349e6c115ecc5821390ec72a4496fbf34a5fc9986713ae9edda0e54","first_seen":"2026-07-17T15:22:26.635325Z","last_seen":"2026-07-17T15:25:04.454019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3525,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":164,"receive":0,"ssl":3356},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.542Z","timestamp":1784301711542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4890CE63A836347FFA81\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-07-17T15:25:04.428484Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1950,"timings":{"blocked":39,"dns":0,"connect":269,"send":0,"wait":273,"receive":558,"ssl":811},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T15:21:48.336Z","timestamp":1784301708336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 10 Mar 2026 04:20:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af9c0a-1478\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5240,"size_decoded":2281,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"a05eeeb83edb7fbf649dc35abb55fa5d","sha1":"d2b5f56b72f31509db196c3857a2e7d92ae2505a","sha256":"34bbd55727fece00b1d33f38121b48fcd792914fd8c236d01f1e1262a34c64b8","sha512":"aedad7006ab8eecc9dd2b28647988e0216b28e8b756553d347cc08c3cd964ec3eaa8cdd6bbafd73bd8ce457a811768a3b382268ad83c670b445fa4ed3b518f24","ssdeep":"96:Tr82rL6LE5yKuc670dL6LB6LY6LjL6LRL6LtF/L6L3dL6Lyr6TCZydHRH/gv6La5:TFiLEL67jLoLdL6LgLtFmLcLGZCxfVLg","tlshash":"09b13fb35cf4d82a23a1012befe6b018aa6111d386194c54b5cc40ed8fd5fe5c9dbba4","first_seen":"2026-07-17T15:22:26.636618Z","last_seen":"2026-07-17T15:25:04.447017Z","times_seen":2,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":14,"connect":87,"send":0,"wait":94,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:50.657Z","timestamp":1784301710657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:50 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTaLYmS%2FQO7RkBfEY7k4DlBPIsau2o0BU5yRIB7ZjHh25mpPV%2BbELM%2FxOKSX6Dhg6%2BELqkKq0jbDsbcHxI94OPO3fAAXNhfdKe%2BvuBqzqaNoQhbU046mX2cRTqbjE8EvbIjiAWSsbrE%3D\"}]}\r\ncf-ray: a1ca3d1bab1d4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":940,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_phb.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.532Z","timestamp":1784301711532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_phb.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10700\r\ncf-ray: a1ca3d213e4eb4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"3f8a2d39781ba0ceb35f8158e38e8f24\"\r\nlast-modified: Tue, 03 Mar 2026 01:45:12 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=ljzfFaAXy_8UxoIqvTHKeomXdKsV8Anhls1zzdgR9JE-1784301711.5533116-1.0.1.1-DhKgQcKyFVpUYejVLAwHs4vHunnoif8zhocGQaQ2iSJUbzXwcYoloZBJL37Tpp80tSW3R7ZbFHPGZocgm2Drb6a8dU4hPCg.9eOygiPC0Jb_YvBQVMIgHhAzdQYt.ld8; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10700,"size_decoded":11574,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f8a2d39781ba0ceb35f8158e38e8f24","sha1":"3abbe00f952c3547618186c24244652d4eaaedd8","sha256":"579729fead460dc03adc9ed58370eb1be5b2b6b151ef639bd61e45265e01f650","sha512":"b1c881d0a5aff5668b8c331aeaaea0fba8ed19fd1132c03e9ca9e40b835a89868013d21a6f585c21b740cdfc2747d0622190e08c533d825a919f35fd309e6ded","ssdeep":"192:C89NAY5SmzbZ0KPwMCK+Zv3SfSHjtqK0pVyVKqXNkOuGeCvcGjYft81R:X+mzRPlLq/8MjtWqVKq7lEBfa1R","tlshash":"c122b0248bc11c7b3bfde65a5541c05b60af82a9a114ce6612c9d077773ac4e0fdd4f0","first_seen":"2026-07-17T15:22:26.637891Z","last_seen":"2026-07-17T15:25:04.425195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":140,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_ldo.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.533Z","timestamp":1784301711533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_ldo.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8332\r\ncf-ray: a1ca3d35fc06b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"73171e791c3e48300238d6efe18c9104\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:16 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=SjomNRvNS12rSn5WSXCUNBk4.hEHw1XQ6y8j1Oc3BtU-1784301714.8805604-1.0.1.1-pgOLpHyMR25sw8bOhjMlNpsqr5nRMPaxmP9B2vUEvF4lopT0TyJxPtopqDOz1JQtfnoCkE3YW6n3HvfIcH3n0_mbSbOUIdPH8UKC01ELKcZLcKjDNknCpSQrLNYesL1A; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8332,"size_decoded":9205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73171e791c3e48300238d6efe18c9104","sha1":"8761c1fcbeffd440ad46ff524e4d0009e4042391","sha256":"3c33302b05e46c79afddd51f5add6751ca30b72993c2b960446cd8476324884e","sha512":"1d0a935384c8728b8f6d84e62f8d8685522eb00aeb73a7d57be9e07a528fa5c07dfe99f2abfb7cd0ec485e11e188768f2581d82796d918b572e9def63da412f3","ssdeep":"192:n89NAY5SmzbZ0KPwnsBLiykAc2/9b8gfFw6Z0JLhbe9lCuIIU:s+mzRPnbdc48gfFw6ZyR6CuIIU","tlshash":"2d029f1dc3604ef27ab94852b5088477523d90105577da3a91adfa5b7c2fc0a6c7a7f0","first_seen":"2026-07-17T15:22:26.63917Z","last_seen":"2026-07-17T15:25:04.423742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3470,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":125,"receive":0,"ssl":3340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_1inch.webp?i=kds?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.538Z","timestamp":1784301711538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_1inch.webp?i=kds?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14426\r\ncf-ray: a1ca3d213e60b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"f8c1b5b96416c75f9d292d7825c2c001\"\r\nlast-modified: Tue, 03 Mar 2026 01:41:46 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=PkKrveM6sl9akbyyGX57YveNTYsz6xPUm48IPc_oYiQ-1784301711.5569632-1.0.1.1-St0USmjt5Oes3gwD6y9g_TM2sxh.kRc0qhMl51fGF0EDzvxkWfteTPgq3ukERkSrRxPf6MOIJdYvlL125yKF2BGvBjmvIgIsO3yaNro7K4N.ztb8hcE7C_e3YIwPhSEX; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14426,"size_decoded":15300,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8c1b5b96416c75f9d292d7825c2c001","sha1":"1f53eb11053de7d0e6c7270028241466918032ae","sha256":"4df281b673997b2445044157226b8e31926a8a3d660975c47dcd3c716f2965e4","sha512":"936aac244952662383b5206f4d95ea2dc2eed7f47f0eb95b542dd3f44e5d84e02c105af75f6964e67f7bc460ac8adf164f7df620086b0380ad9e3d8ecc204c80","ssdeep":"192:589NAY5SmzbZ0KPwtSK9wAx9K03jSuZCyJ2Sz9oDmwXhVNKyuetFHrET1XLxGaD2:6+mzRPtAH3bZCyJ2KmDvfgZetVQF1D2","tlshash":"f152c018c1eb63b627700c73a740e27f89487111b18abc2d6b0feb976345d4d5f265a1","first_seen":"2026-07-17T15:22:26.64043Z","last_seen":"2026-07-17T15:25:04.454924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/link.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.540Z","timestamp":1784301711540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /link.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-4afe\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19198,"size_decoded":19089,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"bd1678707e6e3c21bfc20f0e60dd5760","sha1":"3c2166c1eb5b7457b0e802ff77e4b61a3c0793b0","sha256":"230def0f63a82232ecf8bfd3fcc75ed5ec77bdbc715ccef7a9f30d6f4aecef02","sha512":"bd5f84228b069624c916137d367aa2d6e9975c9ede3c55167614ac07e692db67cc606334e3d5dad0e4b69dd0dab7a3a65e4b00a0a556dbeac36f7c3be2bb26fb","ssdeep":"384:ADVyfTRKjNwLPKmT/z+AIMsVCR/fNCT2XqvKLlCtOXV2Yf:mgTRcNwrKgDBga6vKAn4","tlshash":"f582d0ca22172b1fd574e43a1331aa50522bb743a4d655e97066864bb43f3f9bc2fc07","first_seen":"2025-06-19T02:24:45.818803Z","last_seen":"2026-07-17T15:25:04.468034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.554Z","timestamp":1784301711554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVjXuGoIpEiVB8aaUDGfn8n2NeqdPU%2BX4i6%2Fb3Z%2FUyFfWWZAnNnIll9jDTS5kLh50felg8vFQLj4uyzaOs5lBvW6cN%2BTZwcyv1aj5EXu2lbMK3LOljPnScwJEbCVpP5Q34yPCSfGmeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1ca3d213bf94e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getAllSetting","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.630Z","timestamp":1784301709630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:50 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLd3gbzxEb3f1s6sRkIXcfTDx%2F%2BgQRhWd7vnTBFt7pRDpouLrqP3smdDBHg8qui%2BP1lXUw5rvbvwEXqiWbyMVcLac6mdqxQ2tKIDN23QWsy1D48z7wxpnagDGqyDo6ZMpz3dCz%2BYwyI%3D\"}]}\r\ncf-ray: a1ca3d154a4e4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":938,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/platform/dev/144.png?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.990Z","timestamp":1784301709990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /platform/dev/144.png?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:50 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"689ca809-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-18T09:40:15.704245Z","times_seen":312878,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_atom.webp?2.0.1762865831437","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.185.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.537Z","timestamp":1784301711537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 06:48:52 GMT","end":"Sat, 29 Aug 2026 07:48:37 GMT"},"fingerprint":{"sha1":"47:08:CD:1F:CF:B1:64:DF:6B:37:EE:52:84:D9:43:9B:08:45:47:78","sha256":"8C:B3:D9:95:BE:0C:CA:68:48:72:4F:13:70:B4:AA:FD:1A:D3:BE:C3:9F:99:9F:81:9D:C0:84:2C:D5:E0:56:62"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_atom.webp?2.0.1762865831437 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9980\r\ncf-ray: a1ca3d213e56b4f7-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"f4d34faf5f6630f083bd36debe47511c\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:06 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=1XhPRIneDduKeDwMxsu0MFqXovUvJ9nTn0w.K641Z7g-1784301711.5546865-1.0.1.1-G.83PkgTxUtXUvz5YlwiBF5JMb68TwX5q.r3gV5VaeQAH_vMfUOgMHD4Xf25RBqLNbTNSrK1r3sCcdQTdBzYRB7hSTaI4mgcrQrM8UGSXGO58E.GG3xRTV9r1P1bxmRl; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 17 Jul 2026 15:51:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9980,"size_decoded":10853,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4d34faf5f6630f083bd36debe47511c","sha1":"6cf79264ea55ac6fe91c0dcbed2f75022ec617a4","sha256":"b78b80977f1ef44225acf5970c668ded7d8520256fe79d7031438c496e7fef7c","sha512":"05fe5f22535dc794f24d420a82f2047fbbafbaee01d28b323f86e23473fd3779ea57ebbccb317a010a1a193726371307da90f28cdaf22371be951df2371885e0","ssdeep":"192:CJ0Xcmq1Y7qmpcWZ5o7TdWx8Q0z1YD7fs9eb+U7eMKdq5Ohb2cefEbIknT:G0Xhqu7qmp3GTdkD0z3UaMT5O5QOTnT","tlshash":"9122bf2de2c234009cd24c464ce5f45f6955c5c6a12288f7bec1c78285b90dbef4aaea","first_seen":"2025-11-22T22:43:38.945794Z","last_seen":"2026-07-17T15:25:04.437075Z","times_seen":26,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/ltc.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.527Z","timestamp":1784301711527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /ltc.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-37bf\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14271,"size_decoded":14204,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a056a0cd63c814cbcb32fc85f48f5238","sha1":"e404ebe2d6dbbe64df575ab4843a41e6d75f8ec1","sha256":"4f1f0a756c4b59e4eafa13e903068c407f1ee5c70d687ccec84272c38c082332","sha512":"a5f02566253ff7f55a587b3948c3ef2abe5cb5e17e2795b4028aac12b1a135f1f4318252e12285a4f18a76e89c08b168d952cfe8cfe1c329717e0a4c9953128b","ssdeep":"384:WxTWCV3/ju+JH0FvMqLSaXB4iL65Ko76E:WxTWw37FH0ZB4iL6j7j","tlshash":"1852c05cf7af3e22c0c461ff9b799255e768c405f841571acfb05a838a087f538a3696","first_seen":"2025-06-19T02:24:45.80361Z","last_seen":"2026-07-17T15:25:04.453275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":8,"connect":87,"send":0,"wait":362,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.btcexjtuas.com/ws/5d2c3d41-6325-41b8-9d8c-0c463557f61a","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.633Z","timestamp":1784301709633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"GET /ws/5d2c3d41-6325-41b8-9d8c-0c463557f61a HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://btcexjtuas.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: z9fXnBm+Q91oc1ZRGbmFUw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Fri, 17 Jul 2026 15:21:50 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btcexjtuas.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: NPNU0wCFJg6SfWrIvgHqvRwZidI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y7wEs%2BJbM6CYj84Ajc2qCmV1iVoBodm%2BP9Bwm3nhpHHcqzw4%2F%2BeUnjXmnMA9UWVrzsoSGNw6hCrlKeBOpNaUYLbIZhmNOw1NK0AGbWzNL0iUhehGMhOoPKXpI3saMvBvTQE%2FbJPIqGQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a1ca3d155e8232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=909\u0026min_rtt=850\u0026rtt_var=343\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2867\u0026recv_bytes=1337\u0026delivery_rate=3372972\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=252108d58c0ed344\u0026ts=726\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1083,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":14,"connect":15,"send":0,"wait":722,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/filters-e9047a60.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.642Z","timestamp":1784301709642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/filters-e9047a60.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-d78\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3448,"size_decoded":1745,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3425)","md5":"35577a826a3059adc0c758e209e96fe9","sha1":"b2c858d651a925f315df1d06d06c1f48e84fc614","sha256":"1438c70b4bf4a191dfd9f6ef5d806c2d23c3ba87b250a6adff05ee16216a9dc3","sha512":"1614d338791c95d73e237a392c4e1fc11df45f2c2039712c5cb541c50b29fd4497b13ddcaf48dffa7ffe6d4b0da10239386e1d3787d28a03b5d8e1e1215d0ed1","ssdeep":"","tlshash":"f96114edfcd7613746fa6ae90028455172ceae20785e0e49f58bd045597388ce0bfb64","first_seen":"2026-07-17T15:22:26.646202Z","last_seen":"2026-07-17T15:25:04.472502Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getMt5Amount?coin=xap","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:50.658Z","timestamp":1784301710658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVyjW9fXy23AJ8M3GKczKPQYa2yDZhtI%2B6mXZdwbpdUrqVHZxmBv%2Bwkq6Algzl2sEx8GPT%2F7EJsABygG5IVY7ppajw5Hz8nK3c6RLr%2BvOCBpMCTSxZHgLtst%2Bc5s10sURayHsWk9EGc%3D\"}]}\r\ncf-ray: a1ca3d1bab1e4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":940,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.501Z","timestamp":1784301711501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3770\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A48907CD23C32360B7292\r\nAccept-Ranges: bytes\r\nETag: \"AC57F69A059B27E9B7E2D71F7B556AF6\"\r\nLast-Modified: Tue, 08 Apr 2025 17:33:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14146020860961096738\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rFf2mgWbJ+m34tcfe1Vq9g==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3770,"size_decoded":4345,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ac57f69a059b27e9b7e2d71f7b556af6","sha1":"1af6532d57f9c61f890786bf897ec556ed11a9d0","sha256":"8cb942606d3bbf90682e4e49d691e1b5e761309e17d2b4451f34c10071a41d9f","sha512":"05566aebfddbc7a582225c09246c248c8f1c810b9aa1f40d3bb3fb17afd1d45e55f79e43e40a6ed2dd9c2d0dfbb76ccd8d876e74e16f576be438878326d22896","ssdeep":"","tlshash":"3d715c76d6f5786d9e5d516e12f0771be09eb11831d42341a71b5081382bfa43bb8e07","first_seen":"2024-08-29T18:12:05.864836Z","last_seen":"2026-07-17T15:25:04.46953Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1385,"timings":{"blocked":-1,"dns":41,"connect":266,"send":0,"wait":270,"receive":0,"ssl":808},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.505Z","timestamp":1784301711505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3391\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891AB67323835614AB4\r\nAccept-Ranges: bytes\r\nETag: \"0E83F87B663B1CEF21354B06AE01F593\"\r\nLast-Modified: Tue, 08 Apr 2025 17:37:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10489740580964031108\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DoP4e2Y7HO8hNUsGrgH1kw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3391,"size_decoded":3966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0e83f87b663b1cef21354b06ae01f593","sha1":"e7753016588dc49f7a7d53df75958020b50abd33","sha256":"d2385c360b44175560f7af7c2bb4593ad29c4b462b751e791ec59638e9ade189","sha512":"40c06bd1c4e46dc29ac53ead0fb75548d62f36f2e6f180adbe9d03e6dc8e16e108cae727cd4a90a62e1832b340cd1ca4709cfd656c4c3c690846ffdd8829aec8","ssdeep":"","tlshash":"5c614b9b4fed4408ec04a5bda5e00fa3c2d133727f717ca775897814147a280bb605e5","first_seen":"2024-08-29T18:12:05.909426Z","last_seen":"2026-07-17T15:25:04.467245Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2465,"timings":{"blocked":-1,"dns":37,"connect":267,"send":0,"wait":267,"receive":0,"ssl":1894},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-4971824c.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.628Z","timestamp":1784301709628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-4971824c.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-36c1\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14017,"size_decoded":4461,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14016)","md5":"ad315b75c8a2aa3f4b3928df97c62c88","sha1":"ef19e2aa55145ff1fb97bbba119b4e96e225c60b","sha256":"b2e02af084b0c2166ff77eb7f365eb3d3c76602c5866be4cb772b0d9d46543ba","sha512":"457600cd2741d3b0fd0c928d7be2d7cddfcba4eb37f7e70e54ee211c25ddeda0246cb4968912f87d965082484dd77655621b0858b7c2bcc17d6797cf9090927c","ssdeep":"384:PVmTu8DiFFPFgSmfUxUDgx/lH1ZuJh/gw2Gm43HC5fBWKSF:tF37gSmfUN4oGm43HC5fBWKi","tlshash":"f452c596f9069a3cf5fba85140880010762e7fdf500d89e2b8bd6d866752efcbb4971c","first_seen":"2026-07-17T15:22:26.650145Z","last_seen":"2026-07-17T15:25:04.451574Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/currencyItem-60d85ee8.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.645Z","timestamp":1784301709645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/currencyItem-60d85ee8.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-6d6\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":1015,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"1089970c70c80c7202c76af80156cac9","sha1":"c85254b66ce1b056fec523057b79da4889c136d9","sha256":"60d85ee8da3a27266c72c465a77ff03384a9776be9ae03b980eb193309676fe9","sha512":"628494baa060e49ba3eaa5dcd330f03d54b6fdd995eb23795ad098b214db3e5c95861487d28dc8333a3c1c01c5200869432354ecf46c4a29cf78adfd6db7868e","ssdeep":"","tlshash":"c2314fe4d3160374d93ac8966ea4018cd0543b829057dac9f48ffe1b5fcb6d31b70969","first_seen":"2025-06-19T02:24:45.85215Z","last_seen":"2026-07-17T15:25:04.46186Z","times_seen":12,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/resource/svg/light/user.svg?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.487Z","timestamp":1784301711487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":991,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-17T16:45:38.336467Z","times_seen":392,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getAllSetting","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.556Z","timestamp":1784301711556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6OxbT820GypMLvmzDq287sqN2fdZRBg1Jv9qFpwsisdChVySxwhWRPu1rOBGXwyAaBoX7FxsVLZXtLg3XVFYczqCW%2Fdh5alVHknKo6xsdFWZch6uSGXb42QPnQdAoqU5DeR5xNRhYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1ca3d213bfb4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-6cbf2fe5.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.642Z","timestamp":1784301709642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-6cbf2fe5.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-d5a\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3418,"size_decoded":1405,"mime_type":"text/css","magic":"ASCII text, with very long lines (3417)","md5":"7e3bdda6ff525c786c7f7479df10df9b","sha1":"767dda4936bed1528e2abaca478c597a310765d9","sha256":"6cbf2fe53c98c2cccc001cc4610456bf16be3bf7a816a9db2ab78186a6e5c679","sha512":"0bd9568b4bd93c855f6672fe28f915ac1588831e3d5033ea317e08c6449809056202336b8ddd00cb391bd7022e6394e486bd1ba2c9fef78605d4b34aae389754","ssdeep":"","tlshash":"fc61326eff89013a5d37c5dfad0c5e988f002ea2e4469cd2e04397250e8f793273415a","first_seen":"2026-07-17T15:22:26.653857Z","last_seen":"2026-07-17T15:25:04.439161Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:50.656Z","timestamp":1784301710656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bExDW0T2KOfqTNf9g3nq3MidALHeW8CwPOphr6LssDtLM1GgzPr1NSGimClR56uWtlzyOOUQVJCSZXbj6LsR5m2JPOweCSvUjganudvVu26DNAcP2XwgZMjxnFHqt5FwK9ducjyGoU%3D\"}]}\r\ncf-ray: a1ca3d1bab1c4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":930,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf9890e666df54565ae682be531012c08.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.518Z","timestamp":1784301711518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf9890e666df54565ae682be531012c08.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2467\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891CE63A838343EFC81\r\nAccept-Ranges: bytes\r\nETag: \"E7769DC09F94AE578022F8221612BC48\"\r\nLast-Modified: Tue, 08 Apr 2025 17:43:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3717875445481473298\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 53adwJ+UrleAIvgiFhK8SA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2467,"size_decoded":3041,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e7769dc09f94ae578022f8221612bc48","sha1":"90f514b55b228f1a2e75b41fddf743ebb3c7d012","sha256":"1ff7c9a67232412db2343237ed0d10b4a91be674bc12d313271f8a0561310f82","sha512":"25e8eeb9005e5c5309f745d718167f29442c8ada411abbb45648d18a2e1d656a15e39739ca2f0702dc29e47e7cb342c29ec34d70c0224cbdfe7b01e8139e4110","ssdeep":"","tlshash":"6b513d4a82555123fbd8c77482cca9c804b503b954a92c942c369e86ee4ec75a75d19c","first_seen":"2024-08-29T18:12:05.880996Z","last_seen":"2026-07-17T15:25:04.450906Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2452,"timings":{"blocked":-1,"dns":24,"connect":267,"send":0,"wait":269,"receive":0,"ssl":1892},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtusa.com/doge.jpg?2.0.1762865831437","fqdn":"btcexjtusa.com","domain":"btcexjtusa.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.529Z","timestamp":1784301711529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtusa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 20:46:44 GMT","end":"Mon, 21 Sep 2026 20:46:43 GMT"},"fingerprint":{"sha1":"E3:29:3B:27:92:2B:0A:1D:8B:8F:75:91:72:B8:42:2E:DE:2E:8E:16","sha256":"73:21:1A:07:B1:15:05:D3:A2:04:E8:BD:11:2E:BB:C0:FC:36:DE:17:D1:BC:2B:5C:C6:0A:0E:F2:3F:1C:F3:88"}}},"request":{"raw":"GET /doge.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtusa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Aug 2025 06:35:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6896ec1e-51d3\"\r\nexpires: Sun, 16 Aug 2026 15:21:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20947,"size_decoded":21344,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"48bc32bbaa8a316d1c23b407a8799288","sha1":"ebbc136231178bf80a0acfc6959d9b45bbecf8c8","sha256":"1d314e4d387716d3fd74aa993012cfb3397b1ebb5d8da271abac8cd034c0ef0e","sha512":"4418e4ed86d263063d20a94caf4bac177156772563f97d317a6f1aec79a6f90488a8a11d4a6a79e5c2668661ff53835fecd7787ef71c9edf3e8510266d86c5e7","ssdeep":"384:3BZ5UXLdHFv7YGA7PQiawWq7wPf5tFzU4yQEbEx5Gct1zTM31qZJaE4D:xZ5UbpFv7GPQiawxUPfrFHyQEbEx5BX+","tlshash":"6892d0a98b96359bcf527772398bf95b30074e17084786f68b04e0b40e7059ebc7ca23","first_seen":"2025-06-19T02:24:45.74065Z","last_seen":"2026-07-17T15:25:04.44424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtusa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.551Z","timestamp":1784301711551,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 239195\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4890EE24003137F20570\r\nAccept-Ranges: bytes\r\nETag: \"6AF00FF8B88B635BCFAE7B63FB73F63E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18217933153706741951\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: avAP+LiLY1vPrntj+3P2Pg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":239195,"size_decoded":239772,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"6af00ff8b88b635bcfae7b63fb73f63e","sha1":"c7c004eb309b3f3fd26a7e1e2654a7956de69f1f","sha256":"71522f2099167c896b3d5ab5d90391404a7c870cfdfa6f383a814f7d1af1fad1","sha512":"04203c46cb2ad1412789250d169a6affccc40bf85f04e7c88c756163fb647519b1477876f46fae6e386658aff21f8e70b7cc64f1745754da5e435eac8aef866c","ssdeep":"6144:UnE2BVTNiD//GLbVrXKO9w4tGZz1UVf9URf:UE2BBE/GLbIO9dt+GgV","tlshash":"a3342314d580e5e1c6b1833a59efa267b35f307cb3a20d7768e45533cbb8aa1ab10f51","first_seen":"2024-08-29T18:12:05.907057Z","last_seen":"2026-07-17T15:25:04.457485Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":-1,"dns":0,"connect":266,"send":0,"wait":267,"receive":617,"ssl":809},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1762865831437","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.552Z","timestamp":1784301711552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1762865831437 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 17 Jul 2026 15:21:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126395\r\nConnection: keep-alive\r\nx-oss-request-id: 6A5A4891EE240031375F0770\r\nAccept-Ranges: bytes\r\nETag: \"5021CD447181A2BE27D8B8A3CB9F7D1E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5244213128299386486\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UCHNRHGBor4n2Lijy599Hg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126395,"size_decoded":126971,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"5021cd447181a2be27d8b8a3cb9f7d1e","sha1":"01db3e026290149b3915861cc952eb8915a79eb4","sha256":"ce03288d7b5b2b5d23b4f17af76cb32d388cf921994dc73b4e32238d92aa5661","sha512":"98a159f1a672c22949f4e3b9adfaa4c1e7f48332100a2b4b47c42e323930cddbe1121b7bb6a506f4fe0b47fa66902344e44751fac1501ce77cf3dac4ff949a1d","ssdeep":"3072:mSs4NUd6Tvdf7hl8rzU6CveFFT/W8F7/GnKrtHvrLS:6OTvdrYU6CvQF7W8FLXRPy","tlshash":"e7c31273d55abc9be35c8b39e0e7842a387631092a4a757d8526cd3b104863b0fa1ed7","first_seen":"2024-08-29T18:12:05.898154Z","last_seen":"2026-07-17T15:25:04.420343Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2305,"timings":{"blocked":1946,"dns":0,"connect":0,"send":0,"wait":278,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcexjtuas.com/api/common/type/defi_activity_type","fqdn":"webapi.btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.21.1.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.557Z","timestamp":1784301711557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 03:42:59 GMT","end":"Fri, 02 Oct 2026 04:40:29 GMT"},"fingerprint":{"sha1":"43:39:80:69:50:20:7C:E1:78:7D:2C:1E:AC:0B:C0:3B:68:D8:B2:DA","sha256":"48:87:7D:79:FF:13:37:2B:9B:8F:CA:E6:2F:46:42:2E:9B:A7:3F:E3:75:53:47:D4:7E:82:75:62:20:0C:83:51"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcexjtuas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcexjtuas.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvSmKOIB%2BcCHwqd039C6rCqx%2BZZWF6%2BeoMl9lhWaqv8o5IlNC0DkI%2BvZjZxLUEJXw3Z1rUWS8aXevUTp4xyrIXBEowcuoM6udtUnOscTcIy0Zx6lOXVE2LLGmrEn4P55fljFfnDHfiI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1ca3d213bfc4e4c-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/charting_library/charting_library.min.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:48.905Z","timestamp":1784301708905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-2a6b\"\r\nexpires: Sat, 18 Jul 2026 03:21:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":3705,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-18T07:25:40.634263Z","times_seen":1218,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/vendor-27943b52.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:48.908Z","timestamp":1784301708908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/vendor-27943b52.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-e2e71\"\r\nexpires: Sat, 18 Jul 2026 03:21:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":929393,"size_decoded":305545,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aa015e144b5c9ff5941aa3da431c7448","sha1":"811f57ad1a1d863a6e108e951fa873b789dcbdab","sha256":"c07b2afecca21cf13570b6db45f8f2bd14d409348bf35bea29cd5bebf394819e","sha512":"bf1e14b89a5aa25ee1b0e7e3d0b24243e3b18005971219f47c41212dd49e87bf5550e66642f7375cefd017e58bb8220083aecb10d5fe85e72f560ee1de4f9e64","ssdeep":"12288:WBIeWkKlYRnK0Asm9r+0LwY0tv68WNnDigQD26CWr1TVqVMpjkoKi:WBIewgKpsf0LwY8v6Rd56CWr1TVZkoN","tlshash":"a3153ac97692f06147ab20e240bb0006f33d6e59740e8494f16999eb7d7ad89d2b7f3c","first_seen":"2026-07-17T15:22:26.661296Z","last_seen":"2026-07-17T15:25:04.447897Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/currencyItem-aa794a24.js","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.644Z","timestamp":1784301709644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/currencyItem-aa794a24.js HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-4b6\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":1123,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"f3b15b4d1c6401e2c542badda68da246","sha1":"0cafbccc81494a296293b1061733ec0c9aa2a71d","sha256":"d3c44c254991c23261cc7fffb926f645974016509dde1b9160c2bbba2cfd7d88","sha512":"c0d1b27582e4e9f0737e75d25d786a7fba6e916ebde6b95dc95de722051b166726d928e0afc1fa13e36cea556b7574486e11e629e027f7e4a970b664605c4515","ssdeep":"","tlshash":"fb21af9aa902c7b1cbbe556281bd5414170d7fea701185c1ebed148a37876fcd728a31","first_seen":"2026-07-17T15:22:26.663021Z","last_seen":"2026-07-17T15:25:04.433936Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/assets/index-5afbfee3.css","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:49.646Z","timestamp":1784301709646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /assets/index-5afbfee3.css HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 01:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6913e978-26ea\"\r\nexpires: Sat, 18 Jul 2026 03:21:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9962,"size_decoded":2572,"mime_type":"text/css","magic":"ASCII text, with very long lines (9961)","md5":"3a1f247689da690819eb1b4166265511","sha1":"9214426d256492b8e3de6418dc0ca92081370271","sha256":"5afbfee35fc79b88076baef91f58bc56af0093e124ff8f0532182df3e9c31795","sha512":"3f3b464ffa1553b3dbe3b796474e13225bcfdf9f115b72803f559d267fb34778225a89d6ad2ef400727bad6e3cd74f82ab89f1bdc29eb2728ee80ac48c1196c0","ssdeep":"96:IyUGwezOETj+jXMp5mXUVM2tL0a5ORI8m62rrRTHo4LT3WLERvQ/cgci:IswePf+EYv3Gxo6T3WLERv+","tlshash":"8722532df6ec3739ac37e159afd849cce219b911e6939da1e967c62309cb1e31730448","first_seen":"2026-07-17T15:22:26.664202Z","last_seen":"2026-07-17T15:25:04.449383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcexjtuas.com/resource/svg/light/mengbanzu12.svg?2.0.1762865831437","fqdn":"btcexjtuas.com","domain":"btcexjtuas.com","tld":"com"},"ip":{"addr":"104.244.93.197","port":443,"asn":25820,"as":"IT7NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcexjtuas.com/","date":"2026-07-17T15:21:51.519Z","timestamp":1784301711519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcexjtuas.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 03:42:33 GMT","end":"Fri, 02 Oct 2026 03:42:32 GMT"},"fingerprint":{"sha1":"85:2A:3D:50:47:18:30:E1:07:9E:86:F0:7B:05:5E:6B:93:0F:C2:5D","sha256":"E4:86:1C:08:CB:C6:DA:41:81:EB:97:34:1A:18:3C:70:84:7B:F6:1E:F1:B8:9E:54:E4:41:8F:1E:AA:EE:2E:F9"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1762865831437 HTTP/1.1\r\nHost: btcexjtuas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:21:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\netag: \"6794485c-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":1242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-17T16:45:38.340718Z","times_seen":952,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"btcexjtuas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}