{"report_id":"a68fb604-bb1b-4ac7-9248-d0317a7f1a48","version":6,"status":"done","tags":["suspicious"],"date":"2026-03-16T14:10:52Z","url":{"schema":"https","addr":"cryptoslam-ir.io","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"title":"Cryptoslam","dom":{"size":464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (464), with no line terminators","md5":"d203a8d311af76e2b917bb07b39849f3","sha1":"b66d765bc49fd9becde2794b84b5bf6a4950e2c3","sha256":"0fa35757e0efb72ce69c4475c9b7961bef4c0eff5d7be0ad1b37787ad900991e","sha512":"0f722cc9f52dca908f7019ad05492e409bfe114c6cc5cdf0261dc59285260997f7df2c12a43e543c2fdc0ed4fb3b009bc47a9fe9b75cf62f13664bcd8d9f20b6","ssdeep":"","tlshash":"e9f0dc3690123a39538316ccc981b7063183f1abee02d45c05fc9aacd7d2c9b644824c","dom_hash":"domhash0bb853d50aff6e93bae96d9cf8d7a934","first_seen":"2026-03-16T14:10:39.630342Z","last_seen":"2026-03-16T14:10:59.863802Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cryptoslam-ir.io","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T14:10:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-16","alert":"Detects file containing Telegram Bot API","trigger":"cryptoslam-ir.io/assets/index.3042f21d.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-03-16T06:26:51.072333Z","alert_count":0,"request_count":4,"received_data":8806,"sent_data":2441,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":81610,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-03-16T12:57:00.168437Z","alert_count":0,"request_count":2,"received_data":2048,"sent_data":1121,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"camorope-client-a.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1631624,"first_seen":"2018-09-20T04:36:38Z","last_seen":"2026-03-11T09:37:40.628532Z","alert_count":0,"request_count":2,"received_data":999,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cryptoslam-ir.io","ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-03-16T14:10:56.180868Z","last_seen":"2026-03-16T14:10:56.180869Z","alert_count":1,"request_count":12,"received_data":8119694,"sent_data":5392,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-03-16T12:57:00.110071Z","alert_count":0,"request_count":6,"received_data":1450193,"sent_data":2690,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9e961067be28431da1ed1aee674a4301","sha1":"6bea29022f94064d6062744a72da8e55c894b40c","sha256":"fd56772ad38e41bdb49458a9fe82e9250a7145e342fe9179f3ab25b18370495e","sha512":"643160e0c2c74dc0a250c1d30e81891981d3b0562a99891c6e2a882b356ae5288b1bc8177275a544858b9c084d70a7896a8a4997db7256d5968d2e20a5e2b58b","ssdeep":"","tlshash":"70c08cc4a0c77d105612681054bf79e89024403670881f07ada4d84d3ea60b4823bed8","size":156,"data":"","first_seen":"2026-03-16T14:10:39.668473Z","last_seen":"2026-03-19T19:42:46.824858Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85f46faf4147aea70bf2eef963bce0a1","sha1":"f44e54ee800093e82096a697ea126f548f04ac65","sha256":"3ecca1f64c99825005b934519bd1c9ece59d94facbea8c710099690241731717","sha512":"31690ff22289305ca0cbdb14bef241cce726db0e961fbc2d3c322a103e32efcc1875439033084b39d8d8af549ceb302fb7623671c2d6fd8ed47943cc2a672a45","ssdeep":"","tlshash":"60d022cf0400c30517e29023dc03bd0061f312fb0440e4028eb10aa2ab2cbcfa207bc8","size":206,"data":"","first_seen":"2025-06-13T12:21:54.381621Z","last_seen":"2026-07-28T06:18:24.931425Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-09T16:05:38.92963Z","times_seen":49388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"517e98257c22ecea6b5656d87fdd76a4","sha1":"29fd0f6da9faf61f23f10a27228cc986f25e27b6","sha256":"902b068ae6af5563efbc637e0589e3cd2bc42b6b86127a4d02da8f3f713b3948","sha512":"2326a1da9c4de9313b3860d03a3320591dd3556bc847994cbd0b66d78f64df2ad2ebe26605164823aff89abb7938da31a5f76596fbc40a4559f92594b33eac22","ssdeep":"","tlshash":"8df05c1a94e70538157370ea0bff9c29b0b1311be64cce12ff9d4245ff166894a50f08","size":511,"data":"","first_seen":"2025-11-09T07:55:04.546171Z","last_seen":"2026-03-19T19:42:46.826396Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/index.3042f21d.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871977597774b1ed6e9dfb5f983bbb98","sha1":"e10b912a95ba0f6429fa6d96f27052253a30ea72","sha256":"5cd846b1be7b95a79aeab7de9d8e6f8846a270fb34d205ee86cac7176ef7c1a7","sha512":"8970dd36e0c188363b65ac0afe92b0eb556e99b8a8b245de0973a82862284b2fa66e4604e447258811e40ed5d1ce316371827ea2b8dc248186f668f4ed3ff130","ssdeep":"49152:RBS7zQm9AdefI+mW/XBbsjrm4PWzais+67e9O/xUPr0XCavyA2EJpOT6wrd:ngU+AiL","tlshash":"efe59c13314939a34a72699fd66f920a70acbf84908590d8f4becddd1c19b26319fb7c","size":3136848,"data":"","first_seen":"2026-03-16T14:10:39.666034Z","last_seen":"2026-03-19T19:42:46.823278Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-16","alert":"Detects file containing Telegram Bot API","trigger":"cryptoslam-ir.io/assets/index.3042f21d.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-06-02T03:15:54.771244Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/893.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"72c711adf080251c80c79fac21d48971","sha1":"8460ed7d7836055f48d16714f7d132e9ce25a4e3","sha256":"8309b46f75e4d7f6e77a82cce81e76e59d0c5bb863f85729a9f48b7ae09d579b","sha512":"c7e001fbaa8a55c0a728781e1a67fbdbf32ff1089951c96656c5f67749286742a3073c33bb0eccd1088ded0065a1d91581af03df3885eb5b035470bebe96b701","ssdeep":"192:aCde4ambIiV1F/+RARv0973EVnRupG4tCjUldLuh0j/yyKbA3wN4d:ddxbIiV1tZRb8GWdJ3uQwNe","tlshash":"686284a5b4d0b40f2b9710a2503f2505b227bc2cf18e75a4d7e0d5f766fa1ce5026b2b","size":15936,"data":"","first_seen":"2024-11-12T14:18:43.637446Z","last_seen":"2026-06-06T22:09:39.355662Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-07-02T23:24:00.315628Z","times_seen":2631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd26749d6ce6d2748d4da4e2461c61b","sha1":"a58fe48c5cfcba2900dc7465b85fe9d6341858c5","sha256":"7e8a1c14399902b2f2339515015e02d83ac304db944069190b67e41983b17e6b","sha512":"1c5f9d29c47bf268dd1f88b77c6149e5098e58b6342ef7e037e50a73b481452a68fdca00a4ba69f38c0a931dc36ffc821cb959f9f6ab2aa896de19a09a2d7b46","ssdeep":"12288:AVciXSnka9BGfTsHI5e4lARLgGqg45s/1OZ6:slXSkFTsHI5eRpPqh5s/d","tlshash":"924528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1196802,"data":"","first_seen":"2026-03-06T10:13:01.556157Z","last_seen":"2026-06-02T03:15:54.794282Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/splash.373cd4f4.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"158556ee1cfcc114fa8788bcc2bd3e55","sha1":"48a00289451d11fbd5640ff982d12369031f80c5","sha256":"2971ba7609f4f955abc69e2290555fcaa823765c96bb8274ba1abbbb6152fb82","sha512":"7068cd9a94cac650b4c5fc8d0463edadba31d5b0e2dd5f30400c6223a5cd1816dee0d750ce54a8aa5846a53e486480ab6fa4a32161ed01aa7c230e57ff6e72b0","ssdeep":"","tlshash":"ea715150c40adf7cd4a30466fa69c041e08e9fbad185cd4ae1fc89223ae7d768bc9775","size":3606,"data":"","first_seen":"2026-03-16T14:10:39.648099Z","last_seen":"2026-03-19T19:42:46.800997Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/carousel.es.70a89f25.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a4518a374767673a57bdc08b463d232b","sha1":"dbbea0f8b0d2005226df570b16d2f01ded43c919","sha256":"197f55edcbebe5bb1b874c298abf7b1f38f419b02c4ca56a5b0730fc6fe4d5eb","sha512":"9e894a9115d8b626ecf6ca60180f64a70c48bf836a956c31b88bf376a6ffe536ec0de66f43160f58d48cc92c652e60df07ee8b9448361e237f6cbeee5d07431f","ssdeep":"192:YdP8xHmnVrxoVr1cOmTFppep0/ql0plDOrCQc6SzaWehjNsVU6Bbd1MCdMPdb6PX:YdP8xHgx8if/qsyCWSBe1ATFd/XPn","tlshash":"931209103648a0b187724be4f493c029bab80b14f145f4c6a0eb97951ee6c5aa77dfdd","size":9851,"data":"","first_seen":"2026-03-16T14:10:39.646737Z","last_seen":"2026-03-19T19:42:46.791015Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5222261495d64d245b99d68bb7013230","sha1":"e858a3351fbb6c4f76d769dd5de74a01d11231d9","sha256":"9c4bafa46c22467a0f2eabe0251b6198a42da4746917110ed5b0aceb365502a6","sha512":"6f2b54f43be08deae659048e5d4e557e5f1017d32f597ae93b08cf3cda9fe9269d329b8fe6d830a43c0ffad04fa0da63f8bb3989d33bbd68ff93406f190a6107","ssdeep":"","tlshash":"86c08cc5a0c22d106602645610af39e4a024403b704c1b068cd4ec492e220f18233e98","size":144,"data":"","first_seen":"2023-07-03T07:59:47Z","last_seen":"2026-08-01T04:37:24.996061Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/carousel.es.bbf67ae6.css","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/carousel.es.bbf67ae6.css HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-9da\"\r\nexpires: Tue, 17 Mar 2026 02:10:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrHkeT%2BT5iyetJla05lNe6UmDNofF6bTKYlGPtCGOP4W%2FOrrFm75P5Wh6Bz%2B1C44S2mOIld0jaAJPr1JiPAmsNT8xaJgt7I1wPoBRU4MPPI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd45786aced481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2521)","md5":"c96297bf670657fd073ab4068c626d92","sha1":"68f25b6fdd5738583ca52edcf675303046885e3c","sha256":"fdd153eedfa8265fbb24ad684dcef327e9e1eea9d1da8c54276d52e7b4c89e85","sha512":"f1485b813f4a0aa52be931676971414d07834291b0b80da17a03b28f6f02ca73db944fcf6c2045bb595895f3e9179b5495392181786a7e0f1d137a66ea8ff89c","ssdeep":"","tlshash":"3551e251f241a0289e0b7334dfa5075fa01dba519f01eba971e3732442c67da0f39d8c","first_seen":"2024-12-17T05:56:08.778945Z","last_seen":"2026-07-28T06:18:24.92654Z","times_seen":165,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"5CC75246A01D73279B6562D7EC1FA1B8\"\r\ndate: Mon, 16 Mar 2026 09:42:23 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D07F6FBB5239311A8291\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11091130583004183539\r\nx-oss-storage-class: Standard\r\ncontent-md5: XMdSRqAdcyebZWLX7B+huA==\r\nx-oss-server-time: 5\r\ncontent-length: 64764\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 293279938196471149\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-06-02T03:15:54.771244Z","times_seen":331,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/cover.56ed0b0c.png","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/cover.56ed0b0c.png HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 192009\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\netag: \"6959fbc0-2ee09\"\r\nexpires: Wed, 15 Apr 2026 14:10:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdG4dW8YmV5mqqaS1%2BdUOs%2BiO82d4VQSkC0Dzhhf7YftlgjfxbpnPxEFh1kQkk7xabkTgYwi6tHjNGFbwRBj9fd6uDZXLqAD4lWZ1d7ww3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd4578d6d97481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3501 x 3404, 8-bit colormap, non-interlaced","md5":"17ccad626df800f3cb01533c5ef0cf56","sha1":"aba9fa74fc88802eb12710170c20d0d7db0a6a89","sha256":"56ed0b0cc231db2c1ebc9c5f5611155c3daf7ff0fbb80d6654c10b04690e9548","sha512":"3b3e8a702da6a0775ae3931b7c0ec040a73c7e12ec8ba9d4ab1ecf46f09b323832bc0f1dc035775406d0508cd42371a1761c197258e07f36629d34d4fca3e291","ssdeep":"3072:Qm4sUiIk/u26FNruHsZzb0ThrBb0a+rWRksjSQw7vzZZdntb6lhc:Qm+dNruHKb0vb0RwoQw7bdnp6lhc","tlshash":"b61412af9d4d0fb4da9ff23f56728480f2c91d329c79108bd94151f4a473299c68af4a","first_seen":"2025-11-09T07:55:04.538088Z","last_seen":"2026-03-19T19:42:46.82016Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":808,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/logo-white.6d8b7be8.png","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/logo-white.6d8b7be8.png HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 161864\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\netag: \"6959fbc0-27848\"\r\nexpires: Wed, 15 Apr 2026 14:10:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6waIPfIc9%2BkdS1JLyamMdS8trBAatnYO%2BAzyWafZmavPga8PGqY2YUK%2BCBAL5xlROlrcLs2ww53vYJe7IYAsgvq%2FgNXWsFDLEOKOs6rkNKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd4578d6d96481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1640 x 820, 8-bit/color RGBA, non-interlaced","md5":"868061b25c6b6903c7681548c2a9f647","sha1":"873b4f24b5498ecfc72ae63492a717828d3e77cd","sha256":"6d8b7be84269f5a27e50036ea89c6cc56e49c638dbe9d397bf0c2da8b9988c5b","sha512":"f58530a290b9f6fa499aeabdff7e9a43b60959a843b9eebf760b6ee0f944182055d21fc0af9d3bc1712ad1fe6bbe9049347b398ec0d00c532032692f451f3d6a","ssdeep":"3072:aBL3/SOV6iDhAOLF6cXFBL3/SOV6iDhAOLF6cXo:aNKOGO56cXFNKOGO56cXo","tlshash":"4df30205fc4b60b0f62d1332b4113ab94a1d1430f4aa6bc2d2ceb765b3e25b8f99bc45","first_seen":"2025-11-09T07:55:04.534475Z","last_seen":"2026-03-19T19:42:46.794896Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":798,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=17a8d159dc2bc332fcdb35a18c91a691\u0026track_id=\u0026title=Cryptoslam\u0026referrer_url=\u0026url=https:%2F%2Fcryptoslam-ir.io%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=17a8d159dc2bc332fcdb35a18c91a691\u0026track_id=\u0026title=Cryptoslam\u0026referrer_url=\u0026url=https:%2F%2Fcryptoslam-ir.io%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://cryptoslam-ir.io/\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:33 GMT\r\nEO-LOG-UUID: 9146750410856171943\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T14:10:28.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:10:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jnYgVXXL8EYAy2QVDuyXb%2FVKBzgElKyFyR3n59cBNIuVPdRSmP8vxMP8IPocjX5N6ZABqla2dsre9OmBiXgvSHrIp0glthWjK1h6xtz0VY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dd4576f8d113483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1692,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (311), with CRLF, LF line terminators","md5":"998256ed7c65f4a6a67f0229a13d00d0","sha1":"94b333ac9780e8312e041827eb9b734c49ac4c7c","sha256":"bf713f97ecdd9bb364ae35bd1a149f2059684f2ea62427f2101c771aeaa17eb8","sha512":"f5991c0e80b02786a870b2c172a5f16a965665f6c5ec01b0d6a87cbd59fe2093e1070e44be436a46f4d9f72c17706ae869c26b2ab225f1789d3c1d048cc344fe","ssdeep":"","tlshash":"32314146248088581270a163ddb2fc28f9a321774709cd12b5bd945beff87cd484be18","first_seen":"2026-03-16T14:10:39.632902Z","last_seen":"2026-03-19T19:42:46.806171Z","times_seen":3,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":55,"dns":29,"connect":8,"send":0,"wait":802,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mada:wght@300;400;500;600;700\u0026family=Fira%20Code:wght@400;600\u0026family=Montserrat:wght@500;600;700;800;900\u0026family=Roboto:wght@300;400;500;600;700\u0026family=Open%20Sans:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:29.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Mada:wght@300;400;500;600;700\u0026family=Fira%20Code:wght@400;600\u0026family=Montserrat:wght@500;600;700;800;900\u0026family=Roboto:wght@300;400;500;600;700\u0026family=Open%20Sans:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Mar 2026 14:10:29 GMT\r\ndate: Mon, 16 Mar 2026 14:10:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80924,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"846a0bb3181144baef23b0597660f097","sha1":"5c320a9cc31dcc752406660d40a1d2835fb71408","sha256":"f83deff68ee4a66f61fa854abbb9b84078e105dfa30ed88f51a489a2641fd04e","sha512":"f6e781ee1c6483be01e82b1f33a0357d8397fb54b0060984e0328631ff75ce7eac4d74815f2b8922a99342870ae68248ba7061f711899f6c98a8ce55ab6cd468","ssdeep":"768:uB+SpsLs+6hnwYzFCODS99YURRuWDyjooYhREHPM5svvYaR7AIdI9SSYXRuR5WPP:IVRNRLyl833","tlshash":"be831da1041b5440ab431cd223cebf36ee0fa2617044c079abfd5b9aaddbc66637835d","first_seen":"2026-03-02T13:09:10.239144Z","last_seen":"2026-07-27T11:12:40.443204Z","times_seen":47,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":64,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/index.f1bdfcd5.css","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:29.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/index.f1bdfcd5.css HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-144c0c\"\r\nexpires: Tue, 17 Mar 2026 02:10:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMqu3x8AVWshNtW0itJW0LAQM2AhPk5%2BlBPxtXrR8yuKBabNg9IYSMxWgvpg%2FX2T2bcFLtSFcVHRdiGEML82hwy%2FxU1a0Orz7Z%2F2naCzg3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd457759ac7481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1330188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"81c93aaeb2b02d583744eb0af4e75d87","sha1":"c2e3843020e8d7836d07037b27f75d8fd0c00e76","sha256":"cc2368f47a968652a57eb82139a645eabac5b69806084e6a218f29b97a3e6a75","sha512":"c3c363dd81fd563a216646524c737c9ad56a33cba5b6e0dc66a93d7332741710aec2e31a216bee90793abc93db270a570edc449f05b40c695c1e9551f69bab88","ssdeep":"24576:OqzDEsolh0/ZnwQ1OAPkWDL32ye5trKeG0mT/8:OqzDEB","tlshash":"ab2564a4e21a20fe7763d61f5b40ba6d9532f72ac8414f5af1c6440d4dc3aa43187fab","first_seen":"2025-08-03T10:31:28.140476Z","last_seen":"2026-07-28T06:18:24.926031Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":828,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:31.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 May 2024 09:15:03 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 16 Mar 2026 09:42:24 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69B7D080C5F79E3033CE6031\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\ncontent-md5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 5\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14690526417608046428\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-07-02T23:24:00.315628Z","times_seen":2631,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":48,"dns":1,"connect":19,"send":0,"wait":25,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:31.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 17a8d159dc2bc332fcdb35a18c91a691\r\nContent-Length: 47\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"17a8d159dc2bc332fcdb35a18c91a691\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1773670232454\r\nresp-start-time: 1773670232457\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:31 GMT\r\nEO-LOG-UUID: 406877394163854663\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b63c1ec1f516007546d6f72f87a3e7b2","sha1":"444f24da47021a5cfa44d286f16c0128951d998e","sha256":"7f49aeeebe752266e7435ad43f3f9cc1ff2f30a9814705cd7c61a4a704e0b567","sha512":"e508c9d456872d719e826c64d0b587e1843fe56c3fd72ea3eaa805c17bd1f1da5c6c920c0cafdbda424e6d65410022673d0f65648c74719e0b05bd7ac06f4a43","ssdeep":"","tlshash":"16118c9389b44aaa5f2457cc4208a516d49fb01f0dc0dbfedd213e44997f3a90bd639d","first_seen":"2026-03-16T14:10:39.653544Z","last_seen":"2026-03-19T19:42:46.798631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":2,"connect":20,"send":0,"wait":688,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/splash.373cd4f4.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/splash.373cd4f4.js HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoslam-ir.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-e16\"\r\nexpires: Tue, 17 Mar 2026 02:10:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0i1f%2BbIsfklVOykvZXV7FG3OJ9giRNpu1sDOGi7QdiJDxZuyCnNd%2BLUHsm5VQ%2BFF9NRt%2FB3ToU8rZ6O98%2FMcSZAYY9%2B7CZG9CBeFxuIjAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd45786acee481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3606,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3605)","md5":"158556ee1cfcc114fa8788bcc2bd3e55","sha1":"48a00289451d11fbd5640ff982d12369031f80c5","sha256":"2971ba7609f4f955abc69e2290555fcaa823765c96bb8274ba1abbbb6152fb82","sha512":"7068cd9a94cac650b4c5fc8d0463edadba31d5b0e2dd5f30400c6223a5cd1816dee0d750ce54a8aa5846a53e486480ab6fa4a32161ed01aa7c230e57ff6e72b0","ssdeep":"","tlshash":"ea715150c40adf7cd4a30466fa69c041e08e9fbad185cd4ae1fc89223ae7d768bc9775","first_seen":"2026-03-16T14:10:39.648099Z","last_seen":"2026-03-19T19:42:46.800997Z","times_seen":3,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=17a8d159dc2bc332fcdb35a18c91a691","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=17a8d159dc2bc332fcdb35a18c91a691 HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 9\r\nreq-arrive-time: 1773670233233\r\nresp-start-time: 1773670233243\r\nx-envoy-upstream-service-time: 9\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1479\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:33 GMT\r\nEO-LOG-UUID: 15621386459990984347\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1479,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5290b0a86240671fa53b1359a3174a1b","sha1":"a304ad93a94476f96fa771a5629dbfa1eb38e349","sha256":"87dc712e41686e2ef3be77c4c59e01a21708e574b9ca87e9bba2e596bfda9a73","sha512":"48d6d1c9bd6e070c78ea3f83c395106fbce83d20ae5e4f15037460eca5c6652e92ec5b067686b7c2727280edd12aaacfc7152ffee3f4bfda40ac0de29ceca536","ssdeep":"","tlshash":"5531cb8950829f3d5387a3c829a47406c45e2053f8c85f31d763df2875cf28d3247601","first_seen":"2025-11-09T07:55:04.538907Z","last_seen":"2026-03-19T19:42:46.804553Z","times_seen":4,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":47,"dns":1,"connect":19,"send":0,"wait":242,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=17a8d159dc2bc332fcdb35a18c91a691\u0026track_id=\u0026title=Cryptoslam\u0026referrer_url=\u0026url=https:%2F%2Fcryptoslam-ir.io%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=17a8d159dc2bc332fcdb35a18c91a691\u0026track_id=\u0026title=Cryptoslam\u0026referrer_url=\u0026url=https:%2F%2Fcryptoslam-ir.io%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 35\r\nreq-arrive-time: 1773670233788\r\nresp-start-time: 1773670233823\r\nx-envoy-upstream-service-time: 35\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:33 GMT\r\nEO-LOG-UUID: 6490442635978092856\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5192,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"80c282336e85189649377b6b6a65c976","sha1":"dc364f1642e45bb55bc50a6935a356c4f7637834","sha256":"6a07a86da91a91a678aec25eaadfbfbad5dbe7c3b30792a2f626a3f092d52fc4","sha512":"e60b6af24b2c45a22e012889aa04bbd849057b6456287afb029e779742c4357d68e6b0e59110cbda43094e9db700990fdc562274874f0e13589ae60cfdb19fd7","ssdeep":"96:1LavZxWdiGcacQBo/OH/0e+BUMqnx49OLqdeybgbBbqeRsjoF7nrPXb6:1LahuFcacpOsXZqx49kqdLbgbBbqeRs3","tlshash":"a9b1975ad02dcf790ad54381a666321599ec14d2f0cc1fa5c3addf282adb1ce730e61e","first_seen":"2026-03-16T14:10:59.877284Z","last_seen":"2026-03-16T14:10:59.877284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/index.3042f21d.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:29.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/index.3042f21d.js HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-2fdd50\"\r\nexpires: Tue, 17 Mar 2026 02:10:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBh%2Bj27lT9y0yuU6KKLAqvtLsgpGL7syo%2FhEqWoQ0iLszmrQJiA2vO1ebAtWX2tCAV9eJanh0%2FmX5pW1cjzRVN7CkhtayN4V%2BItSDZ4a4Vw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd457759ac6481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3136848,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2f18cec875a00247594d132d6bd6ab8c","sha1":"d482791eaa66dbc00ed6ba71c2d9d7035dcc97dc","sha256":"910d4ced8283bbad2278d6ca7dd5fbeeaca3781ccf8c7e8fd9a9b2a25354ab23","sha512":"8463aa237258e8fb2a65aff7875df279417c557665cf07486b93cf988c26a0d5db4b4a8f12142d8be39cc06fb7a6f04b14baa54bd0ee24b5e9b1657e7aa2100f","ssdeep":"24576:RBS7zQm9AdAXfI+J4OYW/XBbsjrmEBSwMJzapgmYJ:RBS7zQm9AdefI+mW/XBbsjrm4PWzaiJ","tlshash":"f0256b943199b06183fb58d5507b0405b22a2b4df40894e0f1fddea939bac64a2fbf7d","first_seen":"2026-03-16T14:10:39.635401Z","last_seen":"2026-03-19T19:42:46.816149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1061,"receive":1331,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/favicon.ico","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:33 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 02 Oct 2025 20:39:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dee317-6b5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuqhpG6uisNDIlS1sfP4zc59UKCsBHqsA6k1SKnJ3IyeY%2BTE4W3m2E2Zrc193hXTe0ISkyg1PyDVD7GSa%2Brh16DDn0YkfqAvSmyaX9b6gus%3D\"}]}\r\ncf-ray: 9dd457893d2c481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"69cabb6fe0e832ebb9ac5518cd73cc7a","sha1":"a606dc1563ac0894f94955a30c690c3499d263d0","sha256":"1fe6460e69cbe5bdae9ab99884950bb85b427e567139a8f78a708fc1cb34b46f","sha512":"5240eee8923cb26d34a7581da177da020f493bbed8d0c41a83db42b8e250f7f20a3f75bc04efefebd7b6a64bea7b7f50c72d5b1e85d4dd7cf1f188222a435394","ssdeep":"","tlshash":"ed31f847bcc15d421084fac624e31413ca5f8ad8c8d5f4921dcdc1635cb63b1a5250ef","first_seen":"2025-10-18T06:11:05.250086Z","last_seen":"2026-03-19T19:42:46.792765Z","times_seen":8,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/carousel.es.70a89f25.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/carousel.es.70a89f25.js HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/assets/splash.373cd4f4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-267b\"\r\nexpires: Tue, 17 Mar 2026 02:10:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeblUeCCmsvFFkUTrCxtVdcWplQ8CGHNSzQW3pSyek0s7%2Fso2qoYpsdOR00N%2FTt8UmT%2FqIg30b5Xivf5fGqttD0EBuzs1Ku9EwAgq0ri%2Fpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd4578bfd69481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9851,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9665)","md5":"a4518a374767673a57bdc08b463d232b","sha1":"dbbea0f8b0d2005226df570b16d2f01ded43c919","sha256":"197f55edcbebe5bb1b874c298abf7b1f38f419b02c4ca56a5b0730fc6fe4d5eb","sha512":"9e894a9115d8b626ecf6ca60180f64a70c48bf836a956c31b88bf376a6ffe536ec0de66f43160f58d48cc92c652e60df07ee8b9448361e237f6cbeee5d07431f","ssdeep":"192:YdP8xHmnVrxoVr1cOmTFppep0/ql0plDOrCQc6SzaWehjNsVU6Bbd1MCdMPdb6PX:YdP8xHgx8if/qsyCWSBe1ATFd/XPn","tlshash":"931209103648a0b187724be4f493c029bab80b14f145f4c6a0eb97951ee6c5aa77dfdd","first_seen":"2026-03-16T14:10:39.646737Z","last_seen":"2026-03-19T19:42:46.791015Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/background.5c26105d.png","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/background.5c26105d.png HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3256931\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\netag: \"6959fbc0-31b263\"\r\nexpires: Wed, 15 Apr 2026 14:10:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiAKszZA2TCdWCuPUPeUtrkYbLknQcghWhJW7wu7h8EZK2qgGFrAmpXIO5Ka1MKdnUbltMfDSOyt3mGekgjPy2VaaebyDnlGiiETl0IcsdM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd4578d6d95481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3256931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 3897, 8-bit/color RGBA, non-interlaced","md5":"5416517c5edd990b70618eabf87570f8","sha1":"5c4d1fe880b675e18f93f91a770b9f8e49c0aed1","sha256":"a005c23b66212a10812b6701419f3a87f75f322da14eda637d35808e2f207242","sha512":"55bc2d71caf26c3423b0832f0f8b21b98317c5347915240fb5cbd022415920e0306eab0c76bc7b224cee6602c26cac5bb589db6bc2216ea6e1bc481677d732ac","ssdeep":"24576:r3a2MJsoIMocDK2QUFjVInWQga5skeJZm:rRcsoIMk2RFpigf/Zm","tlshash":"77252304f8bf5066e5db34257ea209ee203f9edf09828f6039708577566673ea97210f","first_seen":"2025-11-09T07:55:04.537304Z","last_seen":"2026-03-19T19:42:46.802448Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":2297,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/893.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:33.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/893.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"72C711ADF080251C80C79FAC21D48971\"\r\ndate: Mon, 16 Mar 2026 09:42:42 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D0922909E93030403108\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4275741097519211760\r\nx-oss-storage-class: Standard\r\ncontent-md5: cscRrfCAJRyAx5+sIdSJcQ==\r\nx-oss-server-time: 3\r\ncontent-length: 4736\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12684768068757984949\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15936,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15936), with no line terminators","md5":"72c711adf080251c80c79fac21d48971","sha1":"8460ed7d7836055f48d16714f7d132e9ce25a4e3","sha256":"8309b46f75e4d7f6e77a82cce81e76e59d0c5bb863f85729a9f48b7ae09d579b","sha512":"c7e001fbaa8a55c0a728781e1a67fbdbf32ff1089951c96656c5f67749286742a3073c33bb0eccd1088ded0065a1d91581af03df3885eb5b035470bebe96b701","ssdeep":"192:aCde4ambIiV1F/+RARv0973EVnRupG4tCjUldLuh0j/yyKbA3wN4d:ddxbIiV1tZRb8GWdJ3uQwNe","tlshash":"686284a5b4d0b40f2b9710a2503f2505b227bc2cf18e75a4d7e0d5f766fa1ce5026b2b","first_seen":"2024-11-12T14:18:43.637446Z","last_seen":"2026-06-06T22:09:39.355662Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/lang/en.json","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/lang/en.json HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoslam-ir.io/\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 16 Mar 2026 09:42:56 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69B7D0A02909E9303037BC08\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 60\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4451875482026880066\r\nx-oss-storage-class: Standard\r\ncontent-md5: PwllhHh/9iZQ3kTiZQ+HHg==\r\nx-oss-server-time: 3\r\ncontent-length: 5048\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11566238850444781183\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3f096584787ff62650de44e2650f871e","sha1":"ea91ca7d94244165cd0021d6eaaab79ff5c755ca","sha256":"7c32a52c7d73dcd8624a7af844564280f6e9ad1c77cab79062ccf819ef34839f","sha512":"dc298505b16c37d5ad1df6b7df187af7183709fe5ad635cf14d679c6077dde591184ba5c3e8a9fd6b02ffa0712a21373feaeda04cbea718a3a64e61132c9c697","ssdeep":"192:5lX/WSWyNsLZMYK92gjpSzUHmbujCJBSBnwI2f4Y7Enm0tEQAbPxDD:5F3tGvg2gJHmzSqIe0tExl","tlshash":"4442d51dc7151da71043031bb84fa026a660915b9fa4767ef3a0416d1fae68f62bb3ce","first_seen":"2025-11-30T13:22:40.844646Z","last_seen":"2026-06-06T03:06:59.650197Z","times_seen":199,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"camorope-client-a.meiqia.com/push/292/kuwbe3fd/websocket?browser_id=7f089093d03541e0cc8b9dede8acf788\u0026ent_id=501236\u0026track_id=3B1xAUulFCW6auj68zJszwTRwir\u0026visit_id=3B1xARxBW9XeM96JaR2YOX2xCii","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:34.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/292/kuwbe3fd/websocket?browser_id=7f089093d03541e0cc8b9dede8acf788\u0026ent_id=501236\u0026track_id=3B1xAUulFCW6auj68zJszwTRwir\u0026visit_id=3B1xARxBW9XeM96JaR2YOX2xCii HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoslam-ir.io\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SdPA9OiuW6gfpXK0TRsiRg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nconnection: Upgrade\r\nsec-websocket-accept: T3d3ktidLFj0mNKZtnlPrKOf4Ao=\r\nserver: istio-envoy\r\nupgrade: websocket\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\nDate: Mon, 16 Mar 2026 14:10:34 GMT\r\nEO-LOG-UUID: 11176012889850077872\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":1,"connect":19,"send":0,"wait":227,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/carousel.es.70a89f25.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/carousel.es.70a89f25.js HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoslam-ir.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-267b\"\r\nexpires: Tue, 17 Mar 2026 02:10:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLAqvyt8GRiDRIK3Hrbshk9FAjQ9EZ2LGBfAlBozk0IgTi71CgL6fMDW2hULrXIvD0h0YnCXfx9Yaw5t7F%2FEmXvAFPAvl2wVfl3SeX2uIkU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd45786acef481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9851,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9665)","md5":"a4518a374767673a57bdc08b463d232b","sha1":"dbbea0f8b0d2005226df570b16d2f01ded43c919","sha256":"197f55edcbebe5bb1b874c298abf7b1f38f419b02c4ca56a5b0730fc6fe4d5eb","sha512":"9e894a9115d8b626ecf6ca60180f64a70c48bf836a956c31b88bf376a6ffe536ec0de66f43160f58d48cc92c652e60df07ee8b9448361e237f6cbeee5d07431f","ssdeep":"192:YdP8xHmnVrxoVr1cOmTFppep0/ql0plDOrCQc6SzaWehjNsVU6Bbd1MCdMPdb6PX:YdP8xHgx8if/qsyCWSBe1ATFd/XPn","tlshash":"931209103648a0b187724be4f493c029bab80b14f145f4c6a0eb97951ee6c5aa77dfdd","first_seen":"2026-03-16T14:10:39.646737Z","last_seen":"2026-03-19T19:42:46.791015Z","times_seen":3,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"6FD26749D6CE6D2748D4DA4E2461C61B\"\r\ndate: Mon, 16 Mar 2026 09:42:24 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D0807D1A533534C872ED\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15743163260591507650\r\nx-oss-storage-class: Standard\r\ncontent-md5: b9JnSdbObSdI1NpOJGHGGw==\r\nx-oss-server-time: 7\r\ncontent-length: 352652\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7870295144435687307\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1196802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef54ccd776c571950363824ef49047ad","sha1":"7cf2fc955baa2a734b4c5d5a1bd08b4622c69757","sha256":"f19803966bdb401b6f4f9fbedf9dd29b932a92513f4c3daa133d7fa2cecf805b","sha512":"a861257e6fb5bbb8b78ac5d9acbe89b07cd32be9301745c039aeaa3c1de9590db4e6a0af715647c0aea75fae72e561f0dba271a29d877d608aca81c7929fc08d","ssdeep":"6144:mLPtqVxPp7Uy96XStztkazQeBX2bbHzsHI5evwlTUMoFOFVwvgG90YnsUqbeWpH5:AVciXSnka9BGfTsHI5e4lARLgGqgs","tlshash":"c22539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2026-03-06T10:13:01.515406Z","last_seen":"2026-06-02T03:15:54.764931Z","times_seen":327,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoslam-ir.io/assets/splash.373cd4f4.js","fqdn":"cryptoslam-ir.io","domain":"cryptoslam-ir.io","tld":"io"},"ip":{"addr":"172.67.143.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:32.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoslam-ir.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 11:37:27 GMT","end":"Mon, 27 Apr 2026 12:35:48 GMT"},"fingerprint":{"sha1":"A0:DB:D0:C9:8E:2E:A1:44:B9:1B:69:03:C4:64:28:D1:1D:48:BA:A2","sha256":"80:81:15:D9:1A:4F:05:58:6D:E9:52:48:06:82:9C:80:FC:34:70:2A:A6:A4:C8:0D:7E:9B:78:D9:59:90:30:A6"}}},"request":{"raw":"GET /assets/splash.373cd4f4.js HTTP/1.1\r\nHost: cryptoslam-ir.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/assets/index.3042f21d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 14:10:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 04 Jan 2026 05:33:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6959fbc0-e16\"\r\nexpires: Tue, 17 Mar 2026 02:10:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yd4VpS8hbXbVJebXZ3LHNwQZjcnysDwTaC0slMvsL6Fx8nmEjQHO86gsZWeXtdno%2F97w9kdpOpc%2BlhoevOWN79uiLtqRSGdwDTXJOiqQeI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd4578bdd5f481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3606,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3605)","md5":"158556ee1cfcc114fa8788bcc2bd3e55","sha1":"48a00289451d11fbd5640ff982d12369031f80c5","sha256":"2971ba7609f4f955abc69e2290555fcaa823765c96bb8274ba1abbbb6152fb82","sha512":"7068cd9a94cac650b4c5fc8d0463edadba31d5b0e2dd5f30400c6223a5cd1816dee0d750ce54a8aa5846a53e486480ab6fa4a32161ed01aa7c230e57ff6e72b0","ssdeep":"","tlshash":"ea715150c40adf7cd4a30466fa69c041e08e9fbad185cd4ae1fc89223ae7d768bc9775","first_seen":"2026-03-16T14:10:39.648099Z","last_seen":"2026-03-19T19:42:46.800997Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/unified-api/conversations/v1/conversation/evaluation_config?ent_id=501236\u0026evaluation_type=3","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:34.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /unified-api/conversations/v1/conversation/evaluation_config?ent_id=501236\u0026evaluation_type=3 HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 7\r\nreq-arrive-time: 1773670234122\r\nresp-start-time: 1773670234129\r\nx-envoy-upstream-service-time: 7\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 196\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:34 GMT\r\nEO-LOG-UUID: 6225219229447567907\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":196,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aea4bed22408c06aa5c1579bd892ec07","sha1":"94639e4b2f334501fe7a5be526ff677b30e08322","sha256":"d3e57599ec56c8ab9b74bf7cc0738a06382260f0438de9c86b053e2a2f977e64","sha512":"e8f82540381e46c36a05adf6f089abf9af318dc567cacc7f7468872af11ce62209a6541da2815a4075a9256b3808c1c2632fc5edfb882fe5359290321db56556","ssdeep":"","tlshash":"18d002bd01c9153f2361a9e5804f129f3356d57f37483dc9d6a046b9e28b6570eb0d22","first_seen":"2025-08-03T10:31:28.148989Z","last_seen":"2026-03-19T19:42:46.810791Z","times_seen":6,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camorope-client-a.meiqia.com/push/info?browser_id=7f089093d03541e0cc8b9dede8acf788\u0026ent_id=501236\u0026track_id=3B1xAUulFCW6auj68zJszwTRwir\u0026visit_id=3B1xARxBW9XeM96JaR2YOX2xCii\u0026t=1773670234028","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:34.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/info?browser_id=7f089093d03541e0cc8b9dede8acf788\u0026ent_id=501236\u0026track_id=3B1xAUulFCW6auj68zJszwTRwir\u0026visit_id=3B1xARxBW9XeM96JaR2YOX2xCii\u0026t=1773670234028 HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoslam-ir.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\ncontent-type: application/json; charset=UTF-8\r\nserver: istio-envoy\r\nreq-cost-time: 2\r\nreq-arrive-time: 1773670234681\r\nresp-start-time: 1773670234683\r\nx-envoy-upstream-service-time: 2\r\naccess-control-expose-headers: *\r\nCache-Control: must-revalidate, no-transform, no-cache, no-store, max-age=0\r\nContent-Length: 78\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:34 GMT\r\nEO-LOG-UUID: 7009976312374168815\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2edff315b30f27810c0ec43492ff72fa","sha1":"d46d073652bd14149baf1defd9b3912596d920ff","sha256":"725ab8d8ca32eb237a03d4a208dda7605024a9130561d696f08c202c2f041c9b","sha512":"01ec57c49557a0262741692d1eb021632214b47e34423c1e5b44b9c25cc3f29ab5ee0ddb3b2cdd0a883e1dbb8ec6b57e0f655fe759929bc6949323d1d1bc4b4c","ssdeep":"","tlshash":"dea0240dc47d30f44c040f0003043d134c1c04f7010074f4131c7f140fd54111430147","first_seen":"2026-03-16T14:10:59.885703Z","last_seen":"2026-03-16T14:10:59.885703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":46,"dns":1,"connect":19,"send":0,"wait":728,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/static/icon-mq-round@2x.png","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:34.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/static/icon-mq-round@2x.png HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\netag: \"7852530B8CCD6C254E2C727B286BD370\"\r\ndate: Mon, 16 Mar 2026 09:42:42 GMT\r\ncontent-type: image/png\r\nx-oss-request-id: 69B7D0922909E93030393408\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18155014595444198583\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000102\r\nx-oss-force-download: true\r\ncontent-md5: eFJTC4zNbCVOLHJ7KGvTcA==\r\nx-oss-server-time: 4\r\ncontent-length: 10613\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17096100723646476261\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 1216, 8-bit colormap, non-interlaced","md5":"7852530b8ccd6c254e2c727b286bd370","sha1":"ae3cd963a27096af016b06697e4e7c08caca6cda","sha256":"df6e80ba7392005025919531597d0f64f8046eec8ee14bcdf3e05760264fe874","sha512":"48fb7a2c9d8c1240997272e706b521a688bbb5c57b7912412389a67c7b5a837c8e16a7c93d7605222d867f20ab99a221f8ac91cf30bb295eb1902e3fe1028515","ssdeep":"192:HtnVTX337t3accoDwSQY/Wm6j3bOHluea7uCTLQvpWj+A6JCzIj+xLM:HVpnp1coDwQ/WmM3aHoxnLQvYjjUj+LM","tlshash":"4022a091aa5af0ef811151f84b3973f761a07da2c9484ce9121d71d9a33fd14f40fb2a","first_seen":"2023-04-10T11:55:01Z","last_seen":"2026-07-10T19:44:37.299382Z","times_seen":2048,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoslam-ir.io/","date":"2026-03-16T14:10:31.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://cryptoslam-ir.io/\r\nOrigin: https://cryptoslam-ir.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://cryptoslam-ir.io\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Mon, 16 Mar 2026 14:10:31 GMT\r\nEO-LOG-UUID: 18363516361894223816\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":46,"dns":1,"connect":19,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}