{"report_id":"a6cca270-d70d-4608-918c-541cd441f49d","version":0,"status":"done","tags":[],"date":"2026-08-01T07:11:42Z","url":{"schema":"http","addr":"gxmcoinwb.com","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/#/home","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"title":"GXMCOIN","dom":{"size":232640,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61819)","md5":"656ff0e19df25b0cd3f195a9ebb4cb9e","sha1":"3cb2866f8c1f3fd6ce72694cc537c07d4a489547","sha256":"bfe9e01c9e779472a603a75c02013c80d2ebd3d021613dcc8d78f3b7676a593a","sha512":"2413a967b2d7812f340d399ffaec4542e4cba1a0196f3570822a4d3642d3d252af9e7d764842e451c25f118ce913cd979a7153432126e7f3b4c59df8a5110e5e","ssdeep":"3072:DDyUkLLjKRl3A7WzfrCiCN4j84r9ZKRlNAUwj84r9ZKRlNAw9:Xi3jal3A76+b6xJZalNAUwxJZalNAw9","tlshash":"04347b30b656586b167b9ac4b5203f0929dbe70fd60cd450dafc03515fcbe70baba0a6","dom_hash":"domhashe3e098cc371c23f4cbfc9b45686f7ebd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gxmcoinwb.com","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T07:11:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.gxmcoima.com","ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":41,"received_data":106044,"sent_data":28850,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gxmcoinwb.com","ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-26","domain_rank":0,"first_seen":"2026-08-01T07:11:54.587314Z","last_seen":"2026-08-01T07:11:54.587314Z","alert_count":57,"request_count":57,"received_data":11915222,"sent_data":27894,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-03-05T08:59:26.929269Z","last_seen":"2026-04-28T01:22:28.966991Z","alert_count":10,"request_count":10,"received_data":1817007,"sent_data":6127,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"s3.coinmarketcap.com","ip":{"addr":"65.9.46.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":215732,"first_seen":"2020-09-13T14:22:05Z","last_seen":"2026-07-28T20:39:37.359213Z","alert_count":0,"request_count":2,"received_data":6025,"sent_data":1178,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-07-27T02:47:27.888767Z","alert_count":0,"request_count":1,"received_data":3306,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~8d6e7d11.cd7469b9.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a834a826e3b552638dc3a6027f11cd05","sha1":"ea8e4dc11bfefd4ac45399509eff53c6aed62e48","sha256":"2d2c73f49decf82d6890b85d713f3fa96cef446379ac56b6bb2e4b316af3dbe6","sha512":"f8747de5247c3157fffbc02fbeffad0203beedd62cef46d2da4269b3e41c4c1fcfc778f57a202b9ba4364337e08d07e27c69d969da576b03793d8e6856a5aa9b","ssdeep":"3072:T5SPLpIurJOqrUFkr2nyKq5B4h9nOWpL3pBpnRYemkER:TkPLmEUqrUFXnTJXRYemkER","tlshash":"48242a3b4e0474492f3a07e7a0cabb1874cc5226db0b997b4ed4cf7421e16c55ac7ba9","size":229460,"data":"","first_seen":"2026-08-01T07:12:04.321238Z","last_seen":"2026-08-01T07:16:05.22884Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~e69e4cc4.f7d0ce55.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa0f5c314c7796b57f6033b3eaf96a7","sha1":"7f0bebab96825cd7fad89b9e80a05ef7368beeff","sha256":"8c8d348720c03234ef3aa21c6402f45f613f7f188e13b1f6f95e8240f278044e","sha512":"290f3538b3b9b893f2bd38d0bc4824e5b64da22685b44b493f8647ce5ccaec8c20ad366b13c202b25c0e533425f2e71e3e37eec3a01516fd7e1acf555a75bb2c","ssdeep":"6144:vvegjkQX1qg3ZGb8xTe0gHt43zCbaveJjDvNOvGy8b/dWWFKIFn3wJajG8uMAVgk:ugjkQXv3ZG4G43zCWGJjDMcD4jBj","tlshash":"acf46b3dcbc165611b338381668bb266f08c8c8cf946d5769eaec21d10d8ec9d1ddbb9","size":788547,"data":"","first_seen":"2026-08-01T07:12:04.238997Z","last_seen":"2026-08-01T07:16:05.199222Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~52d661f0.1565e832.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad06634a5668ddfb04e6f7ef203550fa","sha1":"e9283a12fab78c7a1f866481bda98cd7fb286cc1","sha256":"09af75a02ccc35d896d2ece524d13dbba68889d8c7c22f349d15473aa699bf4c","sha512":"2935ee16b2f22259bcdaceacbbecbda949cbd37b35f305e7bd74a0f694cadaecd0ff4db9e0d4ec61c2e98c4f0114ef45d123e7eec8de1640bae50d3b83c9132c","ssdeep":"12288:F6cDp0FCv1AFkh4zCZFIrRblK8sfpVl6adlNrN5QzJGvMP6W5DVe1BqkkPOI8LoD:mID2m0sYpjihi6p+3V6hoVAsAb6z75HD","tlshash":"24c47673568a98dc3105aa0b99187b4974ae99bd3f73f9e000d4286e32f1b19c135fe7","size":575497,"data":"","first_seen":"2026-08-01T07:12:04.347531Z","last_seen":"2026-08-01T07:16:05.203631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~d44a7288.264d0d48.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"552ebd60cd08f0850ad906cace8d1575","sha1":"b3c1abe45c965f48c31eacfaf4d6de49214ca781","sha256":"d60e08e221846234725bc7afc4da685608ce1fbc9cc4bdd94f6eb68aad5f1dc8","sha512":"37cd93c1191a8ae5a7cb5ba0b2332f8d553c6cc6c53d4866baecb3b45a28bdcb823dc959e309b10f6b616c564078c0d744531dab56f892b3f62efebc498d3c44","ssdeep":"3072:TpnUdPbY+o/O6WH/lEECSaxL50o7+fIbAo:lUdzY+36WHdEECH/J+fI5","tlshash":"c7249409f58be169cd7e9161601e2938a0323fe89415c052f734cc95aec8eb8671fbed","size":226929,"data":"","first_seen":"2026-08-01T07:12:04.281483Z","last_seen":"2026-08-01T07:16:05.231284Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.core-js~987e6011.3e1250c0.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c66a497c8e33cd33b9552c760ce8b46","sha1":"44db046cc0a7aa64950cc4cb846c1a2aa4e5a557","sha256":"a46c66ed763e190a1c36a4d4815d6bf2f6a6b7b53e78dd9405c4ec8e83d1a03f","sha512":"4494523467c565d4f921de8ee5b6d40562099a3849f561d977d6954d46863c20ac01249f1735f4f3284ac941c553152e7a678745363d9b8da08486d848cfc7f2","ssdeep":"384:wgYkwVua361koW+VBUYJC/tq0uDgtLUlDy4SwCYPkwGCTbOXKwhyaY2QpmEQ5azN:C6RTP7kQW4TAK9rNI7QvZ4x5Lof","tlshash":"3253b6ccf6c1b0a846a3756c012f640be1b75a54b89e84c0fb66d1c4ac7a99fa177f1c","size":61771,"data":"","first_seen":"2026-08-01T07:12:04.231846Z","last_seen":"2026-08-01T07:16:05.201774Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~2119ef82.8272bc6e.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b83d509b9a933950e3fd4cb3c303ef9","sha1":"0857287654e670e0458c79b830629d6d97374d55","sha256":"49dd978f85b4a30f2a35da82bb7e297ac977ba0b28ebcefd92fda31ed5931f00","sha512":"3f32bc225fdcea33af312c7db14c2e4475c7228d6146b5bce95f6f78f02364d99a94e3b229e5dfca93eb6124ec8ca498af31e9e0762f15bc3d673ee1f33c9c12","ssdeep":"3072:7CZ/04zPlQdTc9RXhYYHTfyEtqzHQl8azc5PCMO2:7s/0zAjXhLfyEt0QCPxO2","tlshash":"1f34f89c7644f02152a332a5446f140b9236681db50fd938be56d8daa8fd48b333bf7a","size":251309,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.226234Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~41ff223c.75e5ea50.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb440cb60964662dd3f44d236e3490ec","sha1":"7cfca86c245a6be5de015a1071277fc0908e7184","sha256":"bf9a9002f28c90ecb936bbaa2d11ea9b30ab6263e3ac85a735fd02a748e44b0d","sha512":"37d751c9f3e1d2a7ee91be178fefae0680c50ae590814d629e6e314a67e3d684aa0c33361636380941858d7c74e12139418deea6cc3ec61a899ad6b2b4998295","ssdeep":"3072:SPdm8C9N3TYRrzkvrbrLkGT6rxMYsDwCTOV+YrvedPhGmzNOr:udS9xTFTlT6r3sD9OV+YvygmzNOr","tlshash":"2f4439a97244b06243e332f851af180f8337244ca94ad528ba55d5e968be45f333bf7d","size":267791,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.209355Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~ab05e1cd.9e38ec73.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52f1d907766b1df111e70e0bfa7fef22","sha1":"22a7c7de0e9ccc85816e4b20d8652176841ff9b0","sha256":"f4a0e18e66ce14dfa85394836b12e9c5e8f0d2b2453f70d22aed346b650ef2b6","sha512":"8adff8faf854f5e35b1fdcb5617f0c39d78856c40b5166fe85b37b735919262f8d0ba1ee436a57c324fc09002fd0617aa7569c8914165bfe22d520b45ec0b404","ssdeep":"3072:tIXnv2/DVXdoBCydejfPot6lLFomJ8kVJgkj0/+ACyHR3b1SM5b6NlaEhUe8P0as:CXEDldoLGNAJR3bhpBwMS5I0","tlshash":"74b41ac9b692f4a157933279002f500bb2b66959948ed424f744c9e1e9fb98c923ff3c","size":535390,"data":"","first_seen":"2023-08-02T21:20:16Z","last_seen":"2026-08-01T07:16:05.217662Z","times_seen":941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~748942c6.7a7a5e18.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb2dd59f6ae3b0de47cc1779354b6e85","sha1":"d59f444a686010f5e972dd1c96853581208a7d7b","sha256":"aa4c7d786fa963faa7cbca0b70500eaff63fba217d9a2d45f0841a3ba416742f","sha512":"c4383793e1168b4aa895bc917cbe9dc7be6aa74fc4c1a6e8b5d0893a9b34f337e93c4ddef4d188ea8986557ebd517aa1d987b58b082de7189bf2c2711fa33763","ssdeep":"1536:QsjXwazW+C+hp7BBuqOxCcrwllnB0D4qsrXm9JQ:XrLhp7rz4CcAnqD4qsrb","tlshash":"dbc36580b674b012879d3ea4092b608fe27dba3d6847007cf558d4f6bce9685692ef35","size":121772,"data":"","first_seen":"2024-10-16T16:49:24.914368Z","last_seen":"2026-08-01T07:16:05.211369Z","times_seen":1034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~fdadd360.c8e567a3.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13b73afcc6c58c0569469bb369bacba5","sha1":"201607571a6d34f42e938611a4adeccd9d37bc7f","sha256":"f979241a73a78fa0658e4ef82f785c59e3fa5cca68115483d394ea95eb4e9c46","sha512":"1a8c5d949e41a2d92eec6878a4b0b76769bdbcbdc437cb33bbada769a4b14729b45c616cb723b9bea5c65a291ead81a58d659c636325e05f8d9d46cb29922b43","ssdeep":"6144:B6ZEn/7zrmmdl8ZiTspVBtkwSVboLLLf8bm+0rdzS0hH:p/PwVBtnDIodP","tlshash":"3cb4f884f6a17052876a76b4083f500fe275b91d2847446cf278c8ea7dbc988797af3d","size":499926,"data":"","first_seen":"2024-06-07T16:43:57Z","last_seen":"2026-08-01T07:16:05.198173Z","times_seen":1061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~4939e289.0e53b72a.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49f2bfa4f3365791daed86ec1b1250b6","sha1":"0be8a624d8d2a7aa2d89cbad874d09c4c6c70936","sha256":"1fbfe8273d716c390f2daceba96ad260779c8b64eb54a17b79e8fb30cf06e37f","sha512":"5a16e3f1131371a761fc2fce9bc26f014f887e8fbf608b4962d0bbadaf7feb34eea8b7a332c7a77733fe73331a53721a164ff3660d0473f09b7fb0284645ca55","ssdeep":"1536:IXwfpNcLDQeaoKMKFpw91Gbb1+4FDtHCUdm+Qc3DWqsi72:tfpiQeaa91GbImNQQWKi","tlshash":"0104a398f695f065439731a0467f050fe33a685db40a85acfa90c4da6cbd44e323bf7a","size":181585,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.19773Z","times_seen":1026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~9187ef67.365c0c00.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"887d212d41f16d8986d2eb2557271e94","sha1":"ad14765b2287642ce29db1e6f9589ed4ab2151c0","sha256":"4662598ca71a80476b32ae76c982673a14413f219bb60efea9abef00694fb3db","sha512":"07c435247ba4798c0da3bb377a2ca2256bd18d12d102c25a49ec7787d6fad6d8fa2c511d4ca764dbf2ee101ed941664a36ccc81ff3efa282d022ffbb4ce8b456","ssdeep":"3072:xejWzUS9qDsJpnhr73rr2v/efrpUP6Kd5:p9pVd77ryuKd5","tlshash":"aed3c59cf2c5f06502a731f940af050fe23a699a790ad990e651e4c17c7c45eb23bf7a","size":135504,"data":"","first_seen":"2023-08-02T21:20:16Z","last_seen":"2026-08-01T07:16:05.214966Z","times_seen":1025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~6ed3fd28.033eb874.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"244e7817fd6b3d7b259496cd587a189c","sha1":"c660c0f9b76c281af69d2857b680d5254ed7b1a5","sha256":"ac62eee67a49e1149277c07e3c87c20959e1aaf942a38d5fc233c885fe636e4c","sha512":"472b2d8ca803efa9ef5dbbb5cc678e14a9fc6b71b2d99f02a81c8ba61f1f438f594b36e6bf0822a4cfffb17f7529c07d3ca0455b7b88db6c4458b5c4639a66f2","ssdeep":"6144:AlxzyO3JbILfSuDtwni7oUsUDfuOL8isIZfxW8:ATzyO3JbILfrmi8UvfvXW8","tlshash":"5cb41b8d72c5b9714ba36070103f250bb33b299ca40580dcb679d9ea5dbd909622ffbd","size":510732,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.208873Z","times_seen":948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~f9ca8911.97744044.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e00d548f653152bb881fa63a5f8decd3","sha1":"4f25c2976b489c52802672598bdef8d4688dc7b4","sha256":"6a92da25ecbd3e14a1909e1fc66b21bc4028c978e6cb6368480b561f1bfce7e0","sha512":"7ececf4db0897b46e8f560301d234807e2db93c5a87aa6f0cddd055916158db17d2784b83da923d93f82371ecad9473033c5041826c6242ab7a2596f9c988706","ssdeep":"3072:c3X1BIzx8CcqkdA9ny9td/KRhNlYA4zLBXUiMxyvdKztJ:CBjXA9y9td/46hvG","tlshash":"73241ad9b2a1b07503e724e5407f150bf23b6415680a80e8f665e8d97cbc9cea16bf3d","size":223917,"data":"","first_seen":"2024-06-07T16:43:56Z","last_seen":"2026-08-01T07:16:05.224507Z","times_seen":883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~ad1b13ec.e9342f68.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79cc94f86a57c964999c05242718a48b","sha1":"2a44a91175f5164537927c45eab67df62726fab9","sha256":"60e4954e248764a3270a22b23292c9c7dfe760fabf6f282035290549a955a9fc","sha512":"1c1c409efe4fde1eb01db0073c1600fd19e6215ceb68dffb87688b934ee4d4df1d24c50156397fc48e58a08344d7ab0ab0457a6d31efb2adb6aef0f0878e5480","ssdeep":"6144:1V7gV6CQyiAxPOgQR4EEErJGMOlEIjT/AS3AZWYQ/Xw2:1V7gV6CQydPErJGdECT/TX","tlshash":"2934f70119e97018473d872ed1dda119ffcf946ff390cfa65be4463832817a29e8276a","size":243039,"data":"","first_seen":"2026-08-01T07:12:04.244309Z","last_seen":"2026-08-01T07:16:05.225085Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~06837ae4.30803a98.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3ebc36045ed1baa80f3d6b5c2cc1a1b","sha1":"f2e681218add65a83d924bf4a1f3304d21e888ef","sha256":"caaa2969d675b8297fa37f62b4fec16696ea3c7a8f41c848225ae68329eb3628","sha512":"08a87ddca64363f55bbe2aff4460db92c07714588e02e9a4eddbdc4fac1e77f15989ed3191cbe906455d20e48f6b8246487081596ebe5823fc7bdc0d84db903e","ssdeep":"12288:fCF43yIQaxLCN9Bw7fgBKAoLRAREL4XelMYva90uhH+VeV4ejpTaiPc6XDI7:fLiZaIBwfl9ZL4X6MPt+oS8Y4D0","tlshash":"7d15f13e30977d588db58a74b01b99196ca31c9be45c8042a77c9fd1eddeb24230f8ad","size":894683,"data":"","first_seen":"2026-08-01T07:12:04.339807Z","last_seen":"2026-08-01T07:16:05.217075Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~b1f37f3b.06843c0b.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3419f255bc1538994df6825996db34a","sha1":"bb5ac4900bc061ca0d4638d2586107e3b7cb6448","sha256":"fc35d866ac44827ae25e4421d6c7709a08a127fe2095595ade800cb8036c7176","sha512":"32b3e2f14c6f64c9c2c69a61a0cf3b07c210e8112c6218a6bd8cf3cc5bf604ac06a9a09b99e7e1290595cac1cd7964f0678a124d3b85cd9493ca7b23f3f18fbc","ssdeep":"6144:lf+7V+d23PGfnIo+sXmMPaPaXv8dcZ4kNq+4zGb5HUkHPxlsD/z21qxaV5U5iZYR:R+7V+d2PGfnIo+sXtPaPFs4kNq+4zM5I","tlshash":"5b640ff27a10952f376afe5ed2e63568d0f9fc22a603fd28145729900da14f3ab4b531","size":322672,"data":"","first_seen":"2026-08-01T07:12:04.211626Z","last_seen":"2026-08-01T07:16:05.191308Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~5a11b65b.d02e8af6.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ced03a88f9eae9e4e2b25f8e88d011","sha1":"482b7052b14f47891ff2a92555cb075d642be4b5","sha256":"18ace426f735490f4352716b9978db953ed9ef30e86154ac1ccbdde18e2bf88c","sha512":"63efc4a5581c3bacab876e85270f95d3f65aeb905055f23e71edbafcc0e811c81598684da433df316309929426ca78ebfec3c6caa989bbf9b5ba01189967b35f","ssdeep":"768:NvL83ISB80mtRs/5kZ7fyjZxSRbuPQTfQL3JqOnzb1:dQ9mV7fyF6MQTfC3JH","tlshash":"244386db2869684fa6784ce9241be94769277eb2ccf786d051e3c5f231cad743201e4e","size":59920,"data":"","first_seen":"2026-08-01T07:12:04.317692Z","last_seen":"2026-08-01T07:16:05.19577Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~d939e436.54c12217.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f08801486e53e8703450d90fd40709b5","sha1":"8c2a9d3830a7664a552ce961eed36390764dc275","sha256":"2a083ff1ed8ef4a63db30146f3b9f5a6021a00001347456559d97e0a44545721","sha512":"de90c0979596e5a0663a1149c10bae1f2354ef38c5f811c319a94a848905e77a1cc1c73827ad8db779fd68db8150f24d945637097ec2998ca82114d16990ac96","ssdeep":"3072:r59TfJWvb3aGRbyo4bGpLsev6nsBWvb3aGRbyahvN3UygkdUBWYfYWvb3aGRbyY2:V24CNvms3gYfWry8d","tlshash":"b9c441d0a2506412c2691f91446bd08ae32dfdad7c4e016ebf1becf37ca4785552ee3a","size":547040,"data":"","first_seen":"2025-02-26T17:22:17.357303Z","last_seen":"2026-08-01T07:16:05.212469Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/runtime.bbda9fa8.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df67f4ab059c5ebd80f274633c4cc29d","sha1":"2cd5c91d54d5783e9e5a06f8de984b8558ce3cdd","sha256":"0ec7b44f763b12e855f12f90450640a7ee1ab09c2041f295633552e24fb252ee","sha512":"ab28eb8b390f19fa8b60312221069140cb47f45a83da7933c92325d178e908c9220b490311ba11e6ffb6c5660a234a97a5705ea6ebcc30fef394d021132493ff","ssdeep":"96:ELy44++mNnksH21ov/IJVebfQwXRexN+mNnksHGnGh7EldpRfFDX6v:sMiksxvwr6fQwXIxLksB7UNB6v","tlshash":"199195c43f9cf0a953850891587ff0e0f0593d7758a6edd08f0bc9baa56de40021af5a","size":4583,"data":"","first_seen":"2026-08-01T07:12:04.228487Z","last_seen":"2026-08-01T07:16:05.220737Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~c259bd06.ff8d1416.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c818255d86a35346693c201b6bcd34ec","sha1":"5cf99d45ab0da34362e9fb0bf5c3806c6d24b65e","sha256":"a5c3f9d6661906fac89c5a143ecb9760b2d1b65e864635ec55268ed693530329","sha512":"7754c1f07d1bc8b8ddeaca44b37639bc66ab9ad6fcb9752e13f74db26c7ddb457dbd77c19caaacc9605701a4630a7638e910350f881f111f6cc9834ecbe8ae65","ssdeep":"768:xYV2dK2Kfc+lRMkD7lSDBOJfm0QIBU8Dw763r:xsdfBMBpt38DwO","tlshash":"80f23ae87588b0958a53239958df150b83316e063d4fdd10ada9e5c5b8bd08b732ff2a","size":34591,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.221955Z","times_seen":998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/#/","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7fef8930207b23ec9c04386f9a02c76","sha1":"146273d1c716700bb25aaa15e8595624b611ffdf","sha256":"74867c5a2cf408b090752d3cb8767bb46fdb4a0529bc959d96f51aeb2607d7e3","sha512":"e76bc0261fb13841f3fd1b6095c1193ec306312c03f189965ea8fa91818cbd3044963711d7308a29a5aa58accb87e5c8fc087ccec122cab25cf669624ce2f905","ssdeep":"","tlshash":"117000002e88c008b080388e08802eaf22aa82082080e2288008002202e00c0aa00838","size":24,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-08-01T07:16:05.236562Z","times_seen":8357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.ethersproject~3622465b.539abfec.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70a84ce10ac0f068d6b08d7f20552715","sha1":"e52d54ae11403afe2ab40d6283a32940f8a9bf37","sha256":"c5a2ee73651bee44272241b55e9d2a78299e5fc36715418e10b969fac522c827","sha512":"ea3a12e10528ed92dbda1c1a287b2c9ad4351b259e5f42ce86583d0c745a45ae671630fccad01334aa278e5311f5adfa6344fcf82b34bdcafe0f539f8448cd23","ssdeep":"3072:FDzrD2Z+npPP1ET12DgWIvokDzrD2Z+nYZ2MuQS3:NPPm12AIU3","tlshash":"2904b840b370b02387992a94092b504ef27afa7d3947007cf558e8f67cb99846a7ef35","size":177930,"data":"","first_seen":"2026-04-28T01:22:39.314064Z","last_seen":"2026-08-01T07:16:05.229486Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~defe45ab.844d2b43.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61137f53c54bc55296d560235141185b","sha1":"2970448c319fbda930efd9286e7effa756ac6ee9","sha256":"e784f09cdcb9f79b3d40c8f883c0bcaf498e36ec653e59e5bf1123cf9a7f58ed","sha512":"150697ecb05bb5ee55a2d9d3e1283b055bc0c5156a700ea161f78acbfc618167ab93d2508443d2e536d1d5eebb3020f34a7c5ed24078cfb099a9dee1f762ae90","ssdeep":"6144:P/rZ8SqRrjSxhJF8gid5AuF3+iKXsTLaBgNCid5GmWcOwHrA:2BjxKcYw8","tlshash":"eb745405f197e279cebe5111201e0a30f1b27fe5d016c05ab278ca959ad8ea4671ffec","size":364619,"data":"","first_seen":"2026-08-01T07:12:04.324645Z","last_seen":"2026-08-01T07:16:05.232965Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.babel-runtime~7da828cd.7508b70d.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"609c5f0a3d2755859d5044c58d448a44","sha1":"757c5cd0d945fe9d7caaac5f4244b45dd038226f","sha256":"e55d2e548a4ddb01b596a730e11c30ae5bbbb2716e8ffa242ee8eb1c7f057f06","sha512":"c0436fa17e33e243474d65844497fe9477d700f7f00efcdf1aa55ffd8898b3427002bdf65812ad558a8aae1108eb09afc8966cba6ae92e61e83a60ad07d0db2d","ssdeep":"384:GhGcyqHkhUVaInIaHfof3gyGGKqiv9BWDVpo6S:+mmwXPKRV0sz","tlshash":"c372718eb1d2b05416b3712c022fb40af3b71958b85b99d0e32dc1e5ad7684f50b7e6e","size":17153,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.225622Z","times_seen":930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~d0ae3f07.8233b343.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4f02f6c463b3c3f3dd8d8208fed3560","sha1":"8858138a8a523f6b49a553db252ecb4a9a295635","sha256":"579d4d29eda2e2bc4d2c34397284ccdc8b0bfb11b3bc4386a80edb1ec26bd7e7","sha512":"6c80e38f9ca464107bdb0bdd4c4d2d0120e045183f07d0ac12eeb735b16fbd9448f39aa74bc17f73dce7675e226e99170e4be2f9ace3af8708c7db90dcb732a6","ssdeep":"1536:J7fExZz7NjUmuBJUgx1IfGez2LjBpVf2IFV/Dtk+RTblEfu0mAK4/lrWpoZTmrJq:KxZtHGH3B3pE+RT+u0mAR3aSR","tlshash":"0b24f78d32c1f4a147e361f1502f250bb33b596c640a9098f7b8d4eaad7894d922bf7d","size":212534,"data":"","first_seen":"2024-12-29T23:33:15.26239Z","last_seen":"2026-08-01T07:16:05.19203Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~78453b6a.7d1aa3c8.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7abcbc2fbce16ae19f3eeae5bff4582","sha1":"f3b3d9632d9d325f416b8fb4bd3c522546b0cf50","sha256":"e45b82ef1c01b150f5af5015ecd79270d0dc2df68b706d6377de8f6eb1aaa3c1","sha512":"e060d58f02c212c53f6380dc913f55a1a3c77da0f2489a6aafa1753f9b4f5d46529302b991cfbd75c90c170e642607511c3a790c39e31eb3b3ff78b8b421f566","ssdeep":"3072:R5qfmlec1lLIjpMS6fMMn9WA41wOiAFhfUlVukokv:vlec1lk8n9WA4SOzhfUlVukokv","tlshash":"d464a86138ff3370dd5e510146b2fb8aa3a48c9fe1c6843ec501f1d27892a455ebe7a6","size":322001,"data":"","first_seen":"2026-08-01T07:12:04.221865Z","last_seen":"2026-08-01T07:16:05.204175Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~208a5cac.91ad24c7.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d8db78e97669516bd902bbb52623f65","sha1":"bc242f21749451fd21b07ada9d3956cfecdff3cc","sha256":"db219a9c3e041a90fbb1c07822253a2d59b36b8373f1fd628f51594e6e9b8440","sha512":"a804e45971119475a0703977dfa18a944cf5d8ae1f6a7b664cb7480d89f4e101ddc7de880fc926909df01d1f08eeaaf8640441ef1750f39e31f9ccef161e39c6","ssdeep":"12288:4G9NMTM7q4ZCvrvTR+9BGIcCRRL4naFMt50GcUuP5bFqi724gHK44l:TMoq4SQb9cCRRL4aFMtmGcUsqK4W","tlshash":"40f41a368ac520970253e246b649bd4bb99d81fcff9ac22644a8857d31d1db8c3ef74c","size":746951,"data":"","first_seen":"2026-08-01T07:12:04.236265Z","last_seen":"2026-08-01T07:16:05.22392Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.qrcode~029d41c7.6ae6affb.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfd2e7fb4632d1893ce2235e8d68c093","sha1":"c48f948f01f2e4600d6078202ab333c654e9fa73","sha256":"b956cd1d5d038a89ed19d01a661ee7bea8f72ec7adb6f180ac0fe88e38579f2e","sha512":"42cc0e93e8959ff49d667f827b1997f84d37f9d0b325c3cef60c310b63b2548ad4b791efebdb642d5a4d2480415ffc1772b207acaa05362eee9c19e324c29e31","ssdeep":"384:E+ITTIBANS9X8OhLpAFRVqaem1QINHqBRF42J6dKFyUm89F86NFIZTSGCH2y57bz:CTTIBgVqap1WrJ6dK1m89+6NpGCH2y9f","tlshash":"eaa2d799b39071ab53d725d6002f1405e1faa864381a45f8fa58d8d3bd78daa80f7f3c","size":23338,"data":"","first_seen":"2024-06-09T17:22:38Z","last_seen":"2026-08-01T07:16:05.234124Z","times_seen":1003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.ethereumjs~d18c1697.83d728d5.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4423397c1d42fbe0f78be1dbd5f2aba8","sha1":"482886f2a7587afba8364bd23d51337013677112","sha256":"0141b7cf503ceab2f3f93a2b8a96d6cac6f0d262fed228e6ca4df4b0c03d003c","sha512":"b9881d5fb8bfe8cd7f1e2e99a18bf4aee7b4dd9cd7df9cbb3691b47071da5d43c9a4e14e2636a141e8592b848c9c9e0f7083fc828759ef9ced80c2585df1c03a","ssdeep":"12288:tYvEmhiLleW/XD50pjAGj0JA7OXogaw+fgk5cxg56xdjR:tYvEaiLV0pjAi0JA7OXoag56bR","tlshash":"e3f406a4155454a1e2f78aa1fb0ef6e4831fb706ddcaaedfd0d3b19510e9e34da60b00","size":739652,"data":"","first_seen":"2024-12-29T23:33:15.242011Z","last_seen":"2026-08-01T07:16:05.213512Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~7274e1de.91784887.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06c4a4d807566d782f95c6cf09365be","sha1":"670b776c5b0fc2bdcf112ec991cee9d2184bba5d","sha256":"0e89cd3d6047418e6bdcd925e39d65b631c98afafccf98e4b6e94b4d5605be67","sha512":"ce257cd40b991c801638171894db24cfa8414265672655b5d0eec3708f0a7e109c73d016665ceea1d8cf016405b9cc78e808041c014bdf06a7ef34f18057f8c8","ssdeep":"1536:/mQqB0J+xSisyHwpIuim3m03c/GMtcAt0FYIWi9u7xIO5x:/mV0J+Pwmm3itctYIWi9lO7","tlshash":"8fb3f984bf95b0d183a3a2b004af940be3b55c195c4c4578f190ece66cbe9996a77f3c","size":115630,"data":"","first_seen":"2024-06-09T17:22:38Z","last_seen":"2026-08-01T07:16:05.213997Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~31ecd969.f4f547cb.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e1fa0126cc282852cc7eda33cba682","sha1":"9579aa1ff8b9d4b72413bb0cd8c4703bc0b78bdc","sha256":"d0fd42817722ce4797960acc244f5cd5fdcc4d3bbe3224e013fa01e46ce497d0","sha512":"92b321790e69d81df37e30bbc86e4c71b3d6dd6f7b9ab30c75a9c235751a936eb661cfc75031a49b45c96f67af8e4ed262a01da24ea5e7c28eb9e58cc7cf82f5","ssdeep":"6144:xW2a9xeEun1Xpbifl3/AmWnCwhq11WcsJib/jBhVX:PasMDX","tlshash":"ee64d980f674b052479e3aa4096b100ef27abb7d3447407cf654c4f6bcb99c86a6af35","size":321796,"data":"","first_seen":"2026-08-01T07:12:04.2424Z","last_seen":"2026-08-01T07:16:05.211859Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~2aec3c5f.ae4fbb27.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afecb73adcc09d817400364d9c38cc85","sha1":"b87e82b1cd9d7f6000bb324e0b9ad2dd4332d0e6","sha256":"ba8ee90318a69ce56ee7522886468cc81497a622e6755c47bd70e1a94817f547","sha512":"a87a39fe37190814557cfe2cfa154cc0105acb53f8a22d79a266eccf0148aa4167d572254a5d11cd7c4e64f1457c6e242e3a418ed3fd04b269a4c7d0b13a8d78","ssdeep":"192:kGuwm992tux5pgh+ngzy0P6Hi6Ye5Se456785HisIMcJjdXIX4pTxQMkyB4qCJX5:BP6Bq56781YXDUMJB4qsNgChd","tlshash":"1f5253dcf6c6f09a159636f845af141be3366d8aad0da9109741c0c6386850df32bfae","size":14295,"data":"","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.227181Z","times_seen":1073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.zrender~cd89f23c.7aaeec35.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7891eb581d3cd9c969cf55e65ffa1f78","sha1":"0514dfda8d2bdc80659f87340b47ced5b8c40dba","sha256":"7e4f8ccf0f08dee8ef51537ecf0a73878475561a6a32f342b66ba41a4f314615","sha512":"97abd96ea6204ec868bb662c4e2ed13c792c8c0a0708d82593d755813933431e0d2f5992e59cbc5b74be43a0f0978551741b0092d0699a26fee64d772e18201f","ssdeep":"3072:xs0+5xt73DAfGRBWV0nlKwG0A5DqsbxUL2q:C5xt7zAelz2ZI2q","tlshash":"7624e9e8b290b024434362e5843f150ff237255db50e89acf664e4ea6cbc44d667bf7a","size":227325,"data":"","first_seen":"2023-08-02T21:20:16Z","last_seen":"2026-08-01T07:16:05.222508Z","times_seen":1023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:24.364Z","timestamp":1785568284364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:24 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=XTpS5_hYwtN0rwD9p0m6CZmyUka3NC2.iHPIYx_TRSo-1785568284.3675334-1.0.1.1-2gxzxsuxhynl2thCpp2Nb00EOkWiBbidAYizCp7Nztsx4cs4UzW288cFYjAVf06I_PvVySn5JVn1jCX3k5eORbf9mDqOk4hNzDgA.Xt0VTYugGqCd8XZaf9AWB9WbUlgyuNAS_tYKrzp0PkQMdHb92fCaeads3W1l9XelWfLkSHCMpW4TBVOCUQhlaB0QqE0\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=XTpS5_hYwtN0rwD9p0m6CZmyUka3NC2.iHPIYx_TRSo-1785568284.3675334-1.0.1.1-2gxzxsuxhynl2thCpp2Nb00EOkWiBbidAYizCp7Nztsx4cs4UzW288cFYjAVf06I_PvVySn5JVn1jCX3k5eORbf9mDqOk4hNzDgA.Xt0VTYugGqCd8XZaf9AWB9WbUlgyuNAS_tYKrzp0PkQMdHb92fCaeads3W1l9XelWfLkSHCMpW4TBVOCUQhlaB0QqE0; report-to cf-csp-endpoint\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fr2ZkcCvF1icW%2FdW4UNSWh5b%2BkOCi04Cul0vvjp56zDVrO6XMJDga1hsnNtrBWnnlXxFQYyjNfyBocknrQBR8kWWO55T5L35AvYsLjT6U%2Fhry%2FV6K8fIS%2BaEbHIpUIl2exQ%3D\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=XTpS5_hYwtN0rwD9p0m6CZmyUka3NC2.iHPIYx_TRSo-1785568284.3675334-1.0.1.1-2gxzxsuxhynl2thCpp2Nb00EOkWiBbidAYizCp7Nztsx4cs4UzW288cFYjAVf06I_PvVySn5JVn1jCX3k5eORbf9mDqOk4hNzDgA.Xt0VTYugGqCd8XZaf9AWB9WbUlgyuNAS_tYKrzp0PkQMdHb92fCaeads3W1l9XelWfLkSHCMpW4TBVOCUQhlaB0QqE0\"}]}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307514f021a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":2265,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~b1f37f3b.06843c0b.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.986Z","timestamp":1785568272986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~b1f37f3b.06843c0b.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"9ffc9957d3d2a0cbc1c0ed9c28c3258e\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGrly3EGdv2%2BtWA28pmv%2BZi0HH60VKRols5nxQ5CTsDjJF%2F%2Fgc%2BiMEFdHehNHTXSkOZxibZaLABoKQxTr2CMZ4wbz6gE0567E2v7DipUpeDmP1%2BHAbvNaHfJDcAieWtv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a2d6d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323532,"size_decoded":80264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37363), with no line terminators","md5":"b3419f255bc1538994df6825996db34a","sha1":"bb5ac4900bc061ca0d4638d2586107e3b7cb6448","sha256":"fc35d866ac44827ae25e4421d6c7709a08a127fe2095595ade800cb8036c7176","sha512":"32b3e2f14c6f64c9c2c69a61a0cf3b07c210e8112c6218a6bd8cf3cc5bf604ac06a9a09b99e7e1290595cac1cd7964f0678a124d3b85cd9493ca7b23f3f18fbc","ssdeep":"6144:lf+7V+d23PGfnIo+sXmMPaPaXv8dcZ4kNq+4zGb5HUkHPxlsD/z21qxaV5U5iZYR:R+7V+d2PGfnIo+sXtPaPFs4kNq+4zM5I","tlshash":"5b640ff27a10952f376afe5ed2e63568d0f9fc22a603fd28145729900da14f3ab4b531","first_seen":"2026-08-01T07:12:04.211626Z","last_seen":"2026-08-01T07:16:05.191308Z","times_seen":5,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~2aec3c5f.ae4fbb27.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.999Z","timestamp":1785568272999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.echarts~2aec3c5f.ae4fbb27.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"d9c040c218e98af0957a5e48300a1afe\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDZjv0VlPp3QkaJfPhRTcVBcs89DfbzLDSJVEBWn3fddRvui9h6GwEqac4Upouz2%2F0emVnAssMMGSRN3HYPXB1Teausqy4vC8GsjKPDwyPgzWvEs34vfBn%2BuDTwiHSdt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a4d7449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14295,"size_decoded":5772,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14295), with no line terminators","md5":"afecb73adcc09d817400364d9c38cc85","sha1":"b87e82b1cd9d7f6000bb324e0b9ad2dd4332d0e6","sha256":"ba8ee90318a69ce56ee7522886468cc81497a622e6755c47bd70e1a94817f547","sha512":"a87a39fe37190814557cfe2cfa154cc0105acb53f8a22d79a266eccf0148aa4167d572254a5d11cd7c4e64f1457c6e242e3a418ed3fd04b269a4c7d0b13a8d78","ssdeep":"192:kGuwm992tux5pgh+ngzy0P6Hi6Ye5Se456785HisIMcJjdXIX4pTxQMkyB4qCJX5:BP6Bq56781YXDUMJB4qsNgChd","tlshash":"1f5253dcf6c6f09a159636f845af141be3366d8aad0da9109741c0c6386850df32bfae","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.227181Z","times_seen":1073,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/css/about~31ecd969.b2875917.css","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.061Z","timestamp":1785568275061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/css/about~31ecd969.b2875917.css HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"ddd21f64bef29d3f796ec139791e79ed\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u15d5YFgRbND0waq7x4xx8pT9AOS8TO8%2BDPKMR8TA1pfM0%2BRxvnX6cyuszzjdtwkwXd0MxKqG%2F%2BCZjQTB53SRR22OWBWxCxGwUfritWu1UKdeFZlrRYVroJup%2BPZSUH1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172ea049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4739,"size_decoded":1631,"mime_type":"text/css","magic":"ASCII text, with very long lines (4739), with no line terminators","md5":"9c5c1ec86d2bd34927cd8acd20c6ace1","sha1":"5049dfd8c6c28747da7d190ffb01dd9e367ac403","sha256":"d3332c1185ff893c65b08ab02fa20ed4f6fb7e28560f31e1c492f5c129d162c7","sha512":"1bf7f3a3d015fc7391a2da5aac0be20144cf0de32aa8c647a17ac9fb10b1d9fdcfe24a13429d39ec1dac140e3506b80403068ebe3da04d503b74436051f0a787","ssdeep":"96:CZTZlZDxBWrB2VBbMZO7ZpntZb2ZfZlZARx0ZOK:CV7lNHf257l","tlshash":"96a17918a58c6117f33bc7e029d95acd61b6327aa591d3345857e4b6c8c33a2343fbd1","first_seen":"2024-12-29T23:33:15.224697Z","last_seen":"2026-08-01T07:16:05.223195Z","times_seen":152,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/aboutsBack.6e6ff9de.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.416Z","timestamp":1785568275416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/aboutsBack.6e6ff9de.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"daba4a1a64bc5011b5b22840dcfe20ce\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8BQU%2BWuHLwx4O5GPAV08UcND5%2BoCmErt3dlMoISuazOSAGVXtMhUgu38QRbBgZAg0yaGkB4FSrPObk7xJdEwxXS31eNicu3f33aTMzFBF5ncVswS4JX3Vz60YegQD45\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307195ee749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125910,"size_decoded":126563,"mime_type":"image/png","magic":"PNG image data, 830 x 460, 8-bit/color RGBA, non-interlaced","md5":"6e6ff9de60816f1f96145750d16f13b0","sha1":"488f204bfb5226ddead51e9d124a7d71476810ef","sha256":"c298d27b3521f72fba583311c0aeec150296c859379d539933d4dcdb0e3a9665","sha512":"1cf06e5ff80fc51427ad75750022259d30ce83a4e3e6fc14e23222011f5ce545e6c20b954f815434f74c54cc3f7d73d660b300c97a68bc8aec3fe99757e887d1","ssdeep":"3072:jNhqS/FqR1cEqUMguhemdU+mXKqteabOHiapoMCcT:jNNqLaph+rVteab61C+","tlshash":"6ac31211830281e7de9d1cd20f299709264d7ee9e9a51e1abfc6ee407f019bce111e7b","first_seen":"2024-12-29T23:33:15.169512Z","last_seen":"2026-08-01T07:16:05.219674Z","times_seen":189,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:35.453Z","timestamp":1785568295453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLm01Erv4q%2BxZkVGokKJLK18m80KzM3a3Buv%2ByUERZMv%2FJVf7WbTRYh3DqFJC93OEe3UVpN0%2BImEv73apsbOl39ckHLxvqJjyNHdP53UcCXIkEzEmH0XZuKUCV6SRZKuI4Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430796981b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1019,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~41ff223c.75e5ea50.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.001Z","timestamp":1785568273001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.echarts~41ff223c.75e5ea50.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"284cb5a3514e3869c37507282433b1e1\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2Bt1ezUe8j0vELmRgkmUcrXIM46V%2FS%2FwGSsEMeu7urmWtlyIE9bz27Q35jguEH8mcch7eNDa9SvrOzv1lVUhGJ7OmsW4J4an6YysOTXB%2BaV3RIhOkOSoJQmthiYx3E91\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a4d7549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267791,"size_decoded":86330,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb440cb60964662dd3f44d236e3490ec","sha1":"7cfca86c245a6be5de015a1071277fc0908e7184","sha256":"bf9a9002f28c90ecb936bbaa2d11ea9b30ab6263e3ac85a735fd02a748e44b0d","sha512":"37d751c9f3e1d2a7ee91be178fefae0680c50ae590814d629e6e314a67e3d684aa0c33361636380941858d7c74e12139418deea6cc3ec61a899ad6b2b4998295","ssdeep":"3072:SPdm8C9N3TYRrzkvrbrLkGT6rxMYsDwCTOV+YrvedPhGmzNOr:udS9xTFTlT6r3sD9OV+YvygmzNOr","tlshash":"2f4439a97244b06243e332f851af180f8337244ca94ad528ba55d5e968be45f333bf7d","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.209355Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/index","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.440Z","timestamp":1785568275440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/basis/index HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOgIDzmaEXQwd%2BW1K%2F%2F1bmsuw0hIaWgrmq5ZCx4Sp5JvNr77TWqbDlVMvPh%2FlBLawY4WCnDpbJ9lBpeYacQQCQmw3uMGpWbIq4uzmJ8yIQKwQk%2BGuwDWUiEGl3%2FcLLu%2BcMA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243071c1e731a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":1654,"mime_type":"application/json","magic":"JSON text data","md5":"3b9038ebdb8402d008d6b40df01e408a","sha1":"0e62ef95ed19977de2b434fd9bd478ceae4f6045","sha256":"d166175964b3d7d6d3a3a0ff24370783fdf10a58c74c3c867744b56ca0a52fcf","sha512":"30a9ae18a17449f922ed178b3d45289afb91d0afec5138fdc833331499f21c0cc50fdeb0f27b0792b0f996fb6a12f0a65f171b37eb13cc5969e07f5c88fddd3b","ssdeep":"","tlshash":"403178b4d674213c0ba5000836ea3689d7fca09fb8051b5c679c5850b7d56bf074f6aa","first_seen":"2026-04-28T01:22:39.355606Z","last_seen":"2026-08-01T07:16:05.228278Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/css/app~5a11b65b.94c276c0.css","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.964Z","timestamp":1785568272964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/css/app~5a11b65b.94c276c0.css HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"c882ef220b23cf7b5de95a9970545b7a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqUPneCLzBc2rJtjA51%2FEk1TNR8HI6BSnTcPzseiZ7lQAHriCmqbNJDUTB9%2F65Z8WaHfK32LEFl1tk6jWVky9Jmpgm5NvmfF4qTfXc%2Bcfsgb05OeB2Q%2BDIfgjU5mKdhB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a0d6049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":952,"mime_type":"text/css","magic":"ASCII text, with very long lines (796), with no line terminators","md5":"e237566451658919c4bb0a3965d193f3","sha1":"907a5c179a1b0e898e6548406c2b7c6dccb61ce8","sha256":"f7cbe61a8874d69b9d9689944d99c5b943fedd3f7d93e2a5b846d381404bb727","sha512":"b95b47294aa7c0ff28c50ee15fe63ef7861c3922ff592e313baeafe0cbd42a43a268fd08d927ac9db1620a208deb2782431964aedb618d3c83164b2695f5c362","ssdeep":"","tlshash":"f00145d63f4d047cb7a3708de0e15199071ea627eb864fd52804e220b8db7d21139f4c","first_seen":"2024-12-29T23:33:15.211668Z","last_seen":"2026-08-01T07:16:05.218646Z","times_seen":156,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/ping","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:14.016Z","timestamp":1785568274016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/ping HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: set-aws,set-language\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 07:11:14 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=003b%2Ffoy1MOTijSw3dbxt2idOKoguTg8lQG9N%2F2P8HuxNMH5ZHaoc5kdGee7LP648YSak%2Fz2kmhV4AwcpVeE16hcgV6EHSRPyXWuBAPvGJV0LyHqLnXoKgsr5y3EUjdajuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: set-aws,set-language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a2430710a98e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":875,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":394,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.ethereumjs~d18c1697.83d728d5.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.053Z","timestamp":1785568275053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.ethereumjs~d18c1697.83d728d5.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"6791e5e14c23eeed346abadfb27164f8\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDwY3RucOZVu4XLIMbeaDLYm9rau9fq8JsyrODiIJV%2F5F2G6dSZF9B%2FjcneLEbt%2FBGQMGpjKIvI9bZWZVtinh52BehBBWGjxUnM%2BN7GmHLT0JxNRVKR4kegOfqTdUr7U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307171e9a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739652,"size_decoded":269508,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4423397c1d42fbe0f78be1dbd5f2aba8","sha1":"482886f2a7587afba8364bd23d51337013677112","sha256":"0141b7cf503ceab2f3f93a2b8a96d6cac6f0d262fed228e6ca4df4b0c03d003c","sha512":"b9881d5fb8bfe8cd7f1e2e99a18bf4aee7b4dd9cd7df9cbb3691b47071da5d43c9a4e14e2636a141e8592b848c9c9e0f7083fc828759ef9ced80c2585df1c03a","ssdeep":"12288:tYvEmhiLleW/XD50pjAGj0JA7OXogaw+fgk5cxg56xdjR:tYvEaiLV0pjAi0JA7OXoag56bR","tlshash":"e3f406a4155454a1e2f78aa1fb0ef6e4831fb706ddcaaedfd0d3b19510e9e34da60b00","first_seen":"2024-12-29T23:33:15.242011Z","last_seen":"2026-08-01T07:16:05.213512Z","times_seen":198,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/0-btc.3171a256.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.419Z","timestamp":1785568275419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/0-btc.3171a256.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"081b7ba7f924dced4cbc16796b1cc8ef\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cb4NUiPZWykOeq5un%2BWXRK8sq03%2FKMy%2F0A%2FfnOlGjWnIu7hTNP%2FGXep3QRwvfdxDa4Zo6QSOxHmqif9rfyhKlfM%2FidAZl4bOr7%2BBaaSD9pF9hhVYPCp2%2FhPKzElSDOzv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307195eea49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12836,"size_decoded":13500,"mime_type":"image/png","magic":"PNG image data, 358 x 202, 8-bit colormap, non-interlaced","md5":"3171a2561d36e8376598b022e99129ef","sha1":"0a7d280a19ccb374c1ff1a460a29a554388e2260","sha256":"13eb46f8f9838e1c5090ef31d72d3d871b46afdc0529959b299bfe0e3d44f0ff","sha512":"21676d1de1f48dc7bfb2647472568e672c6badd5509bd4b38adab32a7fbd018a1a11cb6440c5537668b1e81de75807c702ad29893df25f329e8ed79c887910f5","ssdeep":"192:g/HONdRQDCFf1mXSYUgmDhJ0YzjExIDK7K1ij0nx8KMUydQ4kdpRTU9e08:gqwCForklGow+K7K1tx8KMZdOXCQ08","tlshash":"7b42d0291dd7f81dfdf8ca790a8115e672bb5e4c2321c928a488be45343e0dd642d76d","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.23183Z","times_seen":936,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/slide","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.435Z","timestamp":1785568275435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/basis/slide HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nContent-Length: 10\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10,"data":"{\"type\":2}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXllZODvBBeNgBRArvHMyqSp0Bt2DFz8cXgUTOAt1kue7h1f5iJTLZ7rh5gY54U4cBSFKw3DJFJYcRS0TVz92IvGr89VDoyhgpK%2FKQXYTaRiGQOGBxz5ORq6PVTv%2BME1B7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243071bfe6c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313,"size_decoded":1027,"mime_type":"application/json","magic":"JSON text data","md5":"870010adfe8178a25d9cfc8378d0d52c","sha1":"00ce8e872f709f4ed55e43b7fb6d13740b276790","sha256":"ab48031f8818bdb4fa7fafdb0b0e831d0aa482f17c4bf039c6e87c39f819ae7d","sha512":"374d12ceff72b4cc90c3fe1cdeb0b7a0629f7a85d3e95847b60fabd44708caab6eb9297e2da4371bfecf240694ce3207cc12e44cd0f4a2a9bedb56e5aedb97d6","ssdeep":"","tlshash":"35e0eba1a4ac646c9bd8024431cd7e03c3dcf09fbd202ea54348dc1006fc6bb1b4d66b","first_seen":"2025-06-19T09:56:57.576688Z","last_seen":"2026-08-01T07:16:05.230077Z","times_seen":24,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~78453b6a.7d1aa3c8.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.980Z","timestamp":1785568272980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~78453b6a.7d1aa3c8.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"35fbf4e593fb97fa7f547908aafe68e0\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtXfdaM2GDCo9T41i3XPkxnYHp0QO5bKJjmTEQL5w%2BNFVkyS615yzRSvNIix00C4jmDCiFFVTnahDsCcVlRKGUvt%2F5rHEkXChxmBFV2Qw%2BENInPQpU396T%2FiwYHfVyrR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a2d6849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323665,"size_decoded":78266,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26687), with no line terminators","md5":"b7abcbc2fbce16ae19f3eeae5bff4582","sha1":"f3b3d9632d9d325f416b8fb4bd3c522546b0cf50","sha256":"e45b82ef1c01b150f5af5015ecd79270d0dc2df68b706d6377de8f6eb1aaa3c1","sha512":"e060d58f02c212c53f6380dc913f55a1a3c77da0f2489a6aafa1753f9b4f5d46529302b991cfbd75c90c170e642607511c3a790c39e31eb3b3ff78b8b421f566","ssdeep":"3072:R5qfmlec1lLIjpMS6fMMn9WA41wOiAFhfUlVukokv:vlec1lk8n9WA4SOzhfUlVukokv","tlshash":"d464a86138ff3370dd5e510146b2fb8aa3a48c9fe1c6843ec501f1d27892a455ebe7a6","first_seen":"2026-08-01T07:12:04.221865Z","last_seen":"2026-08-01T07:16:05.204175Z","times_seen":5,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~f9ca8911.97744044.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.991Z","timestamp":1785568272991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~f9ca8911.97744044.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"c1ef8bb82511c9325b55412968aee140\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BitcKPgdPk%2Fm7lX4pLMkp87dcSnI7OuGTaL2Z7KnNKx5ha%2BBi%2BWk6XG8xUjJDSDJ0ldDqIJpzMe1XbSIdaA%2BwBbWcuKx680TRkbbFMDR5lKp1Do0blG%2BniK58alCHex\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a3d7049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223917,"size_decoded":77089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57932)","md5":"e00d548f653152bb881fa63a5f8decd3","sha1":"4f25c2976b489c52802672598bdef8d4688dc7b4","sha256":"6a92da25ecbd3e14a1909e1fc66b21bc4028c978e6cb6368480b561f1bfce7e0","sha512":"7ececf4db0897b46e8f560301d234807e2db93c5a87aa6f0cddd055916158db17d2784b83da923d93f82371ecad9473033c5041826c6242ab7a2596f9c988706","ssdeep":"3072:c3X1BIzx8CcqkdA9ny9td/KRhNlYA4zLBXUiMxyvdKztJ:CBjXA9y9td/46hvG","tlshash":"73241ad9b2a1b07503e724e5407f150bf23b6415680a80e8f665e8d97cbc9cea16bf3d","first_seen":"2024-06-07T16:43:56Z","last_seen":"2026-08-01T07:16:05.224507Z","times_seen":883,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/user/phone/country","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.130Z","timestamp":1785568275130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/user/phone/country HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Fi0pZ4CRmWolqe1NcwtHS22ovU7EAFUWbbMUTLGvs11ldzwLQJ04GWBEapft4MAuvogiU0Vh2fVrumulTUcJESHxxQnNQJ5jArA1Krh5UKkl64vMioFja3aE2JOc9qK2p0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a2430718ee1c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9605,"size_decoded":3360,"mime_type":"application/json","magic":"JSON text data","md5":"280812ca309256df49789bb780614d00","sha1":"c7c81c0a7ebf4b968bd3223111608b13deceab7b","sha256":"09b7cc52a9b11a1e3a636b9e5fbaaffb5c534514bdd0882b6d866b60443f7d64","sha512":"77de1cf96e25c017bf43f91fc47eacb1bbe7cd20470ce7b53a6097042a01538b68e58d2e4fc3f6d7ed73133999473f647c0234b0774f70c38a66f0ef4515a8d4","ssdeep":"96:VokFg7zjp8YNPXITOS8wF807f+j6zAo6KlZpfvGnNoF5KbUcATl9tF9PzyjQ7nuH:LUWovKNF4YF5hr5VrusYSJN6JC9Cg/2","tlshash":"6c12da7d8929debded763fd83d8b392659fd32083ba42d1a0dc5a37822801d85126573","first_seen":"2026-04-18T06:53:57.106178Z","last_seen":"2026-08-01T07:16:05.207292Z","times_seen":12,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/spot.8a4fe25f.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.420Z","timestamp":1785568275420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/spot.8a4fe25f.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"033eeadeafdc87ffdd99dfe0aeab70a3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yd3ETJtwP4z7DMvOAb0YD%2FxEaroaOBpXFT%2BU%2FfifF7S5F%2B4AuqqhBlwpGBG23S8yJ4GPutLF76aaRSiPzmjPIop3%2F3ED62K8jPPHejGTzNxGDQsog3Vo9RmXILZKFfUz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307196eec49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7009\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7009,"size_decoded":7666,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8a4fe25f3de77b7ca9421e0caf9d6618","sha1":"5f643e35a5a62950f95e9bda5fbd93ef6495be68","sha256":"578a45db20ccddcaeb11865fcdecff9467e7ab4cf5921b22fd67a2b057ebec50","sha512":"e184147936fe2122cf1ac9d1d400cf860b7e3639d2c0d349e965de49a250fa3127ea89d6060be0d535959da41bd5a52b42f8bdad0cfb94e4b7a288cd3d6ea7d4","ssdeep":"192:QeSwa1Jv7ta2aNIjlIbnG+xgObWsRXa1afUyG:Lea2aBG+xgGjRXnc1","tlshash":"0ae19e9b33f5c1148ba7cfec17f21b867e731366c0d4f61a45867b2ca8a0945ea1ee10","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.218172Z","times_seen":936,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20260319/0/425314951121252352.png","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.317Z","timestamp":1785568276317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20260319/0/425314951121252352.png HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 341791\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14BFDFBE373041D39D\r\nAccept-Ranges: bytes\r\nETag: \"512A686353E7DD872573E3E50B47EA92\"\r\nLast-Modified: Thu, 19 Mar 2026 07:29:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16907081812446549997\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: USpoY1Pn3Yclc+PlC0fqkg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":341791,"size_decoded":342342,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"512a686353e7dd872573e3e50b47ea92","sha1":"e15d1ec497161d2ae6d9f0b251c4adc433ea000b","sha256":"1827e4c33846a1391d4ef58a8905c5e20fef32b32e58e128b88873ce05f0fdc8","sha512":"374d3fbada7e792de53142d3e9b37cc5bd1c66137ee7c479e23d5908dcfe5d19ae20584a8397a91f8d6873ec5740be5cba2bcbc9b4888a39a190afa18650372d","ssdeep":"6144:SM9gRIgqG2Gck9KCiGST0VoE/KysAJ5tID5ph6MCp9qQxOq9IQWmaS28jLa:X9QIs2GRsbWU3h61pOqj48jLa","tlshash":"6a7423fb14205951fb4eac518fe91f80f6e9021f23e25ae9418427c8bbdf062ca56c79","first_seen":"2024-10-22T12:15:26.872617Z","last_seen":"2026-08-01T07:16:05.232402Z","times_seen":393,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":-1,"dns":0,"connect":173,"send":0,"wait":175,"receive":527,"ssl":350},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:33.449Z","timestamp":1785568293449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:33 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJMvEa8ywII93D8oxSSYFHT7sLFR6ecZRM2nPiWdyAd1JXMOTHLKPVt5Twfm4Xe8a99RJer0kuadl%2FzEuAiHIi0tW3M97s%2FaKQtH8FJqoienzQ75TPQYL87TFVSAjnwvqmE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243078a1e791a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1013,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/css/app~06837ae4.e08ad622.css","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.962Z","timestamp":1785568272962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/css/app~06837ae4.e08ad622.css HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"cc0344da44605dbffdb6cdaf17b72b12\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMcYsIPNW25Fyms%2Fr8tJLxYLhl5UyYsFtOaSfsWVgHOUqQoHujB%2F4x5JMDpcaVdSKjTuQs9HmGUb2UyPu9hCZ1clHO%2BgRXIQfHR51phfTUe93sg6dw4OQPtvyC6BATnM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a0d5f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45415,"size_decoded":9375,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (45339), with no line terminators","md5":"3d3b411ceb1f236795aea36ed9d1cc02","sha1":"26c7f4fb8cb98ac432848ea07f44eeb31035bdff","sha256":"d1205ea6aeaaf26b2949f70d2d464b21a9f5a50ab7671573a2de8ebce4fbcc55","sha512":"3d961459fde648dac28019ac905f6f7578f0638aed63553feb2f52bc7e020a1a4b22f9947c5dda871d289081d6a24828909796595966715601fcb23d2d9ca4b4","ssdeep":"384:cseDb2NCRdLVsZoueuwxagP0zwaGBm2jXG5WSFcaoRt+WSRa2Jzu3gPI9F+eKFiA:mHLWqQFcLXm","tlshash":"5213ff6f7f99204c827fca5289a57beda724f61df301a2efe4533a12cec72470950568","first_seen":"2026-08-01T07:12:04.225737Z","last_seen":"2026-08-01T07:16:05.19065Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~ab05e1cd.9e38ec73.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.983Z","timestamp":1785568272983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~ab05e1cd.9e38ec73.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"073cb34fcee87708bd9a9f5d198001cd\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pna8Iq735%2BuhadjTBqExVxzRgTK99DsSLtqBBhP2HdpevRGlU93g2AJcha8SOcTZzTzQcJDtF5J3YxXWkuUOvgemyhg9sn%2B5ruwv3%2FX27g7r%2Fq0G7pVPOBWZrvpKJ8Fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a2d6b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535390,"size_decoded":140692,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"52f1d907766b1df111e70e0bfa7fef22","sha1":"22a7c7de0e9ccc85816e4b20d8652176841ff9b0","sha256":"f4a0e18e66ce14dfa85394836b12e9c5e8f0d2b2453f70d22aed346b650ef2b6","sha512":"8adff8faf854f5e35b1fdcb5617f0c39d78856c40b5166fe85b37b735919262f8d0ba1ee436a57c324fc09002fd0617aa7569c8914165bfe22d520b45ec0b404","ssdeep":"3072:tIXnv2/DVXdoBCydejfPot6lLFomJ8kVJgkj0/+ACyHR3b1SM5b6NlaEhUe8P0as:CXEDldoLGNAJR3bhpBwMS5I0","tlshash":"74b41ac9b692f4a157933279002f500bb2b66959948ed424f744c9e1e9fb98c923ff3c","first_seen":"2023-08-02T21:20:16Z","last_seen":"2026-08-01T07:16:05.217662Z","times_seen":941,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~c259bd06.ff8d1416.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.008Z","timestamp":1785568273008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.echarts~c259bd06.ff8d1416.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"13e2c4ee238727a3a40d0f60d67858d0\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btPx%2FADZOjC8ahbA69AFDqiAQ5Ltpyo5iSr8nz4qnuopPr1W0tgqBUw47cJ7ZHQ3d8VGMcfSCfAPo0zGy0WofcDTdqio0dGXUCe76CTyLTGH9gZxBBMxtlqVC7BrWRkc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a4d7849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34591,"size_decoded":14193,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33985), with no line terminators","md5":"c818255d86a35346693c201b6bcd34ec","sha1":"5cf99d45ab0da34362e9fb0bf5c3806c6d24b65e","sha256":"a5c3f9d6661906fac89c5a143ecb9760b2d1b65e864635ec55268ed693530329","sha512":"7754c1f07d1bc8b8ddeaca44b37639bc66ab9ad6fcb9752e13f74db26c7ddb457dbd77c19caaacc9605701a4630a7638e910350f881f111f6cc9834ecbe8ae65","ssdeep":"768:xYV2dK2Kfc+lRMkD7lSDBOJfm0QIBU8Dw763r:xsdfBMBpt38DwO","tlshash":"80f23ae87588b0958a53239958df150b83316e063d4fdd10ada9e5c5b8bd08b732ff2a","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.221955Z","times_seen":998,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/runtime.bbda9fa8.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.011Z","timestamp":1785568273011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/runtime.bbda9fa8.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"898842f0fa08c7825de7abba0eb159b8\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=514%2B4so9CjGWN%2F9mEAgPZPVgtoAQl%2FxYZD1lhAG2Tz9RS14YCgVUvp25RJquRC5mjm%2FFWLTZKeH5atbWMDEkS2%2BBK4X%2BNmzDiie5R1qx773W8gMkrygewT3%2BFYt%2F%2B4Ky\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a5d7d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4583,"size_decoded":2522,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4583), with no line terminators","md5":"df67f4ab059c5ebd80f274633c4cc29d","sha1":"2cd5c91d54d5783e9e5a06f8de984b8558ce3cdd","sha256":"0ec7b44f763b12e855f12f90450640a7ee1ab09c2041f295633552e24fb252ee","sha512":"ab28eb8b390f19fa8b60312221069140cb47f45a83da7933c92325d178e908c9220b490311ba11e6ffb6c5660a234a97a5705ea6ebcc30fef394d021132493ff","ssdeep":"96:ELy44++mNnksH21ov/IJVebfQwXRexN+mNnksHGnGh7EldpRfFDX6v:sMiksxvwr6fQwXIxLksB7UNB6v","tlshash":"199195c43f9cf0a953850891587ff0e0f0593d7758a6edd08f0bc9baa56de40021af5a","first_seen":"2026-08-01T07:12:04.228487Z","last_seen":"2026-08-01T07:16:05.220737Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/css/about~d44a7288.75e2c088.css","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.072Z","timestamp":1785568275072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/css/about~d44a7288.75e2c088.css HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"5c8c1113ad2651d849e68589132e0b74\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTwVOKAiBq58XVzaxjKC6wxzD5Wgtyj%2B0q6H8bCSF1OeOATIv9oqc%2BFL7x%2FKSjkBcxLe8h%2FLwTog6sClXAzkT3kSu1xK%2B2E4mbLeVzHuuGOeDasIUvoD6YJ%2BTUkFvq47\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307173ea749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301932,"size_decoded":46484,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"68f7e9b304df94543d505875c51bb948","sha1":"2c50b9c5ecc90ad48e4e04feed026938d529460f","sha256":"2f53386b2f0cbd6be5952b1bda31da876c638571ec6366e1925476d5597ed093","sha512":"d54addb4095bc5e1e391809c6186be9252cd4f1685ccf8d827692095121f1d7b4517b334dbfbebcb3a36cc2b98c53ccdd851fb9b2d39be49b1a7100cf428f0c5","ssdeep":"1536:ku1PMuB/unWLvyRn56q+CZTP2go7W42go7N2go7j+Zl23He0RKnVr2IBe4Udt:oZT+6pAuZl23He0UVr2se4Udt","tlshash":"5f54c52fba5e340d953bc65229907ecc1618b77bd3019a7db8e36d45cc972433a23ad8","first_seen":"2026-08-01T07:12:04.229583Z","last_seen":"2026-08-01T07:16:05.206775Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/index","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.458Z","timestamp":1785568275458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/basis/index HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7FPE2ksh6rpQS5m5SIPDBYfzDRAtt3guQm2rUI%2F6UZ%2Fot%2BEc586ZZYnHQzpKBO4xdcT8pevQNBHCzK3CSc88V5Q%2FpSanHzc3FH4delO9%2B3caUbdNgwkZvONQaiqk0R%2FJG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307199e2f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:18.241Z","timestamp":1785568278241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nContent-Length: 121\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":121,"data":"{\"period\":\"1min\",\"symbolIds\":\"[\\\"52946918015242240\\\",\\\"52946918157848576\\\",\\\"52946920854786048\\\",\\\"52946921785921536\\\"]\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:18 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0RlkfahHyu0PkaQ6TM93HaAb0bw7djdwjQdrsVRMEjhM3Lzbdif2ylB4BQdGntEabHRtvY8E9wMtKYa5AoflHLY9alYUStcsO9udx4PxeDMxUPujoT1kVtGko2wQw7nEo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243072c49181a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1339,"size_decoded":1237,"mime_type":"application/json","magic":"JSON text data","md5":"11539087ca51d97dec46f6ac65f055e8","sha1":"cd1c15b528cb12ed5a93fab88654ea22a2e79cfb","sha256":"50437a3e6655e56fcbb94c37fb865de91ddd679d9532af3c9b4b6222f1686b08","sha512":"8191db312e3a020a016dfa1ac462377a98157bde441d83e9b798b24a0323a120ffc311ba34c9a29090b7cb997603119e936274fbdf59f4450c381c89418456bc","ssdeep":"","tlshash":"bd2186527260847e4d2572c17cb3af5a1f7d00a5d6860e5882c64d5551e4de83e0bfb5","first_seen":"2026-08-01T07:12:04.230809Z","last_seen":"2026-08-01T07:12:04.230809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.core-js~987e6011.3e1250c0.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.995Z","timestamp":1785568272995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.core-js~987e6011.3e1250c0.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"804e9ecf73676d2d1f418a018fc4e23b\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsdYz4wI86Ni2m4C6IjG2NTHXH20856Usjfvq%2BQrHTYu5DpXWV8W%2Fx61kXmvKKLSevSM1Riyz563KoWDwAYEmYX8AToGfWBvNsQLkqD6u%2FEFg1RmLmf0bitLB7Mu1WVf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a3d7249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61771,"size_decoded":24376,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46199), with NEL line terminators","md5":"3c66a497c8e33cd33b9552c760ce8b46","sha1":"44db046cc0a7aa64950cc4cb846c1a2aa4e5a557","sha256":"a46c66ed763e190a1c36a4d4815d6bf2f6a6b7b53e78dd9405c4ec8e83d1a03f","sha512":"4494523467c565d4f921de8ee5b6d40562099a3849f561d977d6954d46863c20ac01249f1735f4f3284ac941c553152e7a678745363d9b8da08486d848cfc7f2","ssdeep":"384:wgYkwVua361koW+VBUYJC/tq0uDgtLUlDy4SwCYPkwGCTbOXKwhyaY2QpmEQ5azN:C6RTP7kQW4TAK9rNI7QvZ4x5Lof","tlshash":"3253b6ccf6c1b0a846a3756c012f640be1b75a54b89e84c0fb66d1c4ac7a99fa177f1c","first_seen":"2026-08-01T07:12:04.231846Z","last_seen":"2026-08-01T07:16:05.201774Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/favicon.ico","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.745Z","timestamp":1785568273745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMAI9Sgtjlo1W5LHliemrNtybU8pkK1HZ%2FW7GLqKEr8tXrctGcKnUK0RFEoakXpAUB8iOYpa%2FUh47MceVBhqXwrt4HOIShDnUD1BstyMscM%2B%2BpLjti7awOmYNGS43CNz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a243070eede649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":515,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T10:16:08.787829Z","times_seen":17651357,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/ping","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:14.009Z","timestamp":1785568274009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"GET /api/app/ping HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSET-LANGUAGE: ENGLISH\r\nset-aws: true\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 07:11:14 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLYdq%2BSsuooJXrTf0rcE5yB0cDaiJjbvJhTDWHS0QmCwZ6oQ3Hbu6nU8QIxOzoxBYkeYolS7X%2B5qiCmlWgT%2FM2%2BT3Rf0hZaj39KykzdEQRUqvWvHiq5OMDNGapDeHUKB7%2F8%3D\"}]}\r\nvary: accept-encoding\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a243071328da8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":824,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-08-01T07:16:05.219207Z","times_seen":1193,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/cs.4ba947ea.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.423Z","timestamp":1785568275423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/cs.4ba947ea.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"597f3e7530641ccf5b3c74e84a6387b8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GCKQaOmZD26CRcRgRdI9DwGalYNqeas0z3G%2FfW%2F7xEk4CekE9AvJYjgv%2BvelaA7g0H%2BqbZOru0pojkmw948aMR0f%2BAqrBplAXFPXzY2q%2FX6xAOvCFORowRXYR19mJRDi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307196eee49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5355,"size_decoded":6014,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4ba947ea4372887d583defffabb28505","sha1":"f89a0f77571a0a1b7252605317befeb35c0d2f18","sha256":"3bd937dafaed5be6ec5700576a1292844e0ef5b3a353605a35f068bd115d701d","sha512":"d73fe0aad117e8936d54b4c7adcbabc0470b75fef7f3a65f80b241392fdd40c078e3f3314d70317882893afa1f23c7c9c369d3698302ce5ecfca79f0f21a518d","ssdeep":"96:V0Q/lUuj0BRDjv/qV6hwU3oNxmWT/yYo90lfiAsCZcChi0E76TtayuJ13LnWy:V0qqggDDqJU4NxmWjZpisZcCSRf3","tlshash":"e5b19ec56310e16893670c74326f4ed2fdf2aad6dad02ccc1e889e1f8464aec90266c7","first_seen":"2024-06-22T21:23:48Z","last_seen":"2026-08-01T07:16:05.213033Z","times_seen":935,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~9187ef67.365c0c00.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.005Z","timestamp":1785568273005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.echarts~9187ef67.365c0c00.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"43fb99d2ac292fdb1de5536ee476c133\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tda73Uy6bKoS0edI1aawpPlAWky6bKeXxhagU%2FoRqgvY%2Bmqijoq8kTQmzez%2B6hQGHQ9yV18SlPc6iVivaheN9f4tInbtsE8UrSvVuDGYQyzMvvwFQp3wM6hcyZdPmCy2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a4d7749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135504,"size_decoded":44852,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"887d212d41f16d8986d2eb2557271e94","sha1":"ad14765b2287642ce29db1e6f9589ed4ab2151c0","sha256":"4662598ca71a80476b32ae76c982673a14413f219bb60efea9abef00694fb3db","sha512":"07c435247ba4798c0da3bb377a2ca2256bd18d12d102c25a49ec7787d6fad6d8fa2c511d4ca764dbf2ee101ed941664a36ccc81ff3efa282d022ffbb4ce8b456","ssdeep":"3072:xejWzUS9qDsJpnhr73rr2v/efrpUP6Kd5:p9pVd77ryuKd5","tlshash":"aed3c59cf2c5f06502a731f940af050fe23a699a790ad990e651e4c17c7c45eb23bf7a","first_seen":"2023-08-02T21:20:16Z","last_seen":"2026-08-01T07:16:05.214966Z","times_seen":1025,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~7274e1de.91784887.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.064Z","timestamp":1785568275064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~7274e1de.91784887.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"3b584d73c4d274ed26b8363561bc954d\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9%2B4ic1OU%2BDHzVXwx6dsd3TQzIkrxKxCTehzEFaBOzjxv5aosiJaMTLhYoEr0d99e%2FK4K7MJ8MGcxXBag4aHS4HFLIC18kRx3oi1RELV2UA6OUFobSyAvb3FK6zK9EK8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172ea249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115630,"size_decoded":36201,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41550)","md5":"c06c4a4d807566d782f95c6cf09365be","sha1":"670b776c5b0fc2bdcf112ec991cee9d2184bba5d","sha256":"0e89cd3d6047418e6bdcd925e39d65b631c98afafccf98e4b6e94b4d5605be67","sha512":"ce257cd40b991c801638171894db24cfa8414265672655b5d0eec3708f0a7e109c73d016665ceea1d8cf016405b9cc78e808041c014bdf06a7ef34f18057f8c8","ssdeep":"1536:/mQqB0J+xSisyHwpIuim3m03c/GMtcAt0FYIWi9u7xIO5x:/mV0J+Pwmm3itctYIWi9lO7","tlshash":"8fb3f984bf95b0d183a3a2b004af940be3b55c195c4c4578f190ece66cbe9996a77f3c","first_seen":"2024-06-09T17:22:38Z","last_seen":"2026-08-01T07:16:05.213997Z","times_seen":995,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:18.244Z","timestamp":1785568278244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:18 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1oEMcwsnyzA%2Ft4gx9bK%2FSjHT7y95MxQkrGUAIKRACQu2lhA%2F5vIpsd1mVDGOSx6h9fDkQ%2B69TATdVLFxKBtUJ8F7dYbxb6Yz78ENEC8K5Z3GAQMkjeNJzT8EssqVDG4ns8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243072b08f31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1017,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~208a5cac.91ad24c7.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.970Z","timestamp":1785568272970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~208a5cac.91ad24c7.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"2da197ea9aac2c50f57cbb1db0af8349\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7ssWn%2BwNwtw0QWpiHvHgZm899POS4YvgmU51r1VaG2XYOixcpkarrcnqHVToFm76nNU%2BlOZfMu1muH0xSTrOZpEsONBLDCbhyiQtJyC%2FVZOzYYDECSGLwbs6w6ufA5v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a1d6349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":747588,"size_decoded":213086,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37888), with no line terminators","md5":"8d8db78e97669516bd902bbb52623f65","sha1":"bc242f21749451fd21b07ada9d3956cfecdff3cc","sha256":"db219a9c3e041a90fbb1c07822253a2d59b36b8373f1fd628f51594e6e9b8440","sha512":"a804e45971119475a0703977dfa18a944cf5d8ae1f6a7b664cb7480d89f4e101ddc7de880fc926909df01d1f08eeaaf8640441ef1750f39e31f9ccef161e39c6","ssdeep":"12288:4G9NMTM7q4ZCvrvTR+9BGIcCRRL4naFMt50GcUuP5bFqi724gHK44l:TMoq4SQb9cCRRL4aFMtmGcUsqK4W","tlshash":"40f41a368ac520970253e246b649bd4bb99d81fcff9ac22644a8857d31d1db8c3ef74c","first_seen":"2026-08-01T07:12:04.236265Z","last_seen":"2026-08-01T07:16:05.22392Z","times_seen":5,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/low-fees.176e073f.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.421Z","timestamp":1785568275421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/low-fees.176e073f.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"94aa146f0b32554032cfbe0e3045b79a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UI9BcfK5uUup4lx4kwpNwEKg2qtavIP%2FE303JEnm8z1vp1Cfj1eAeZRSqn65rlJ1CRfo9PiPCqSfMFo4%2BIitLIVNGRPSBicpmYfYDtoraX8fj4ss8PirpBf4UYE0aB6J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307196eed49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7121\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7121,"size_decoded":7772,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"176e073f78f3205a14b2058f6afdd099","sha1":"49a9378d399552cbff91ab41eab23f66836c3706","sha256":"0301ee6bc0f00ffde6af2eef6bc4c916a12126f0ac0d84c082cad5128585da8e","sha512":"006e04cbcf5ffbfff51912c0428dfc1a621311e99b5728f80da0c260522eff6d61854569cbfd7ce911de604c6e446fc736805a2e741cf42f5a9b59815e92d927","ssdeep":"96:rJH02334cP1nGLptE0EgxgcvG50Uw9kWdtK1vT6UaURjvxj/24p98l+/x4Jbv0y7:rJU2RGLpj037GVwvJ/hEl+/WR7okp1","tlshash":"7be19dfad222a63bd06f4158a958fdc034c66b28671b94d38482ecdf6dff39419d6804","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.216534Z","times_seen":935,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.coinmarketcap.com/static-gravity/image/6fbea0356edd48a4a68a4b877195443c.png","fqdn":"s3.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.314Z","timestamp":1785568276314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 11 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1B:1B:E4:D0:1B:69:1C:B6:DC:35:3C:55:50:29:1B:F8:E4:2B:AD:4B","sha256":"26:57:04:89:BF:67:93:5F:2F:DA:08:E3:A7:D4:28:B9:66:FF:8A:42:3D:02:44:5B:F6:B5:BE:14:C2:19:54:95"}}},"request":{"raw":"GET /static-gravity/image/6fbea0356edd48a4a68a4b877195443c.png HTTP/1.1\r\nHost: s3.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2691\r\nx-amz-cf-pop: ARN52-P1\r\nlast-modified: Thu, 11 May 2023 06:38:08 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 130\r\nvia: 1.1 1abd987c61e5ddaeca88770eced438a0.cloudfront.net (CloudFront)\r\nx-amz-cf-id: WCs9Y66-1I4PyyWjusQWvfZsQhspZWClseULxG3fMHe5KjRXoSl01A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":3193,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-01T07:16:05.216015Z","times_seen":25727,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":44,"connect":38,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~e69e4cc4.f7d0ce55.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.989Z","timestamp":1785568272989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~e69e4cc4.f7d0ce55.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"c5f16ab4b556136e7a37e5a406e993f1\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZfWZE1CD7TP2a5BOrYP3h4plYWDHZfkT5PhefSQTYCqKTExSpyrpXqd%2BxOgE6TCITQc52CDJIB2Mp9W4YGLuSiRCx74uuMNmMq0JMeHNawqXKrSynOx4NL14UslnRwU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a3d6f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":788576,"size_decoded":239726,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62219), with no line terminators","md5":"8fa0f5c314c7796b57f6033b3eaf96a7","sha1":"7f0bebab96825cd7fad89b9e80a05ef7368beeff","sha256":"8c8d348720c03234ef3aa21c6402f45f613f7f188e13b1f6f95e8240f278044e","sha512":"290f3538b3b9b893f2bd38d0bc4824e5b64da22685b44b493f8647ce5ccaec8c20ad366b13c202b25c0e533425f2e71e3e37eec3a01516fd7e1acf555a75bb2c","ssdeep":"6144:vvegjkQX1qg3ZGb8xTe0gHt43zCbaveJjDvNOvGy8b/dWWFKIFn3wJajG8uMAVgk:ugjkQXv3ZG4G43zCWGJjDMcD4jBj","tlshash":"acf46b3dcbc165611b338381668bb266f08c8c8cf946d5769eaec21d10d8ec9d1ddbb9","first_seen":"2026-08-01T07:12:04.238997Z","last_seen":"2026-08-01T07:16:05.199222Z","times_seen":5,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:25.437Z","timestamp":1785568285437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:25 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeT5skmteNq%2BLGaRUDFSuiebkbNsAt0%2FJEjw957EIzEsLmf2%2F6SyB1SvJv%2Fg%2BhFsAqlbrktGG3uj9gZhgud2X4NwXlcKv167Xv0an1gE7VEus2cP06%2BvjVY3orNFRYCrAKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430757ffd81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:34.451Z","timestamp":1785568294451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:34 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B00daMin2nBCLRAC1vTE5bNFZWUEtdly9HAy49LmtCG91pGJXndaM5Sg2fQUwxVou%2BgjKjdxGq4d1%2FgAk3w9%2BlvKC9zf%2Fv%2BXpj6K39Xa%2F7aFe9D7JZsGpzRGeuY%2F1vOriSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307905f151a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1025,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:37.456Z","timestamp":1785568297456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:37 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GhXB8WIv6YBRzZCIJasOEDVJEcj%2FHY%2B2elf2sO0ryw7UPUUjdUw5R4vVUUpMxE1fFpeDPUa5KYZIfSH%2BQGgHAtiWPvOW4VvcFLxT8t9BUU1h2k%2FzAn2j51sw5t%2F3l%2BDdBjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307a31a3e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~d939e436.54c12217.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.065Z","timestamp":1785568275065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~d939e436.54c12217.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"1c43f2aeddf8cffd4e2aa2fec04c39d3\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySkjMaZsxx0pAgmDzJ2Ldfe0JcB7FVBxcXkmoAuCqV4A1RLbPzfrBXx8kz4Rz%2B4Mq4Zkt86xZMhtuX9OAcoB5AWEjdIfo%2F7h2lX37WXXMQEkcx%2BLR2hMPZqTPSmamwVM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172ea349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":547040,"size_decoded":123769,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35792)","md5":"f08801486e53e8703450d90fd40709b5","sha1":"8c2a9d3830a7664a552ce961eed36390764dc275","sha256":"2a083ff1ed8ef4a63db30146f3b9f5a6021a00001347456559d97e0a44545721","sha512":"de90c0979596e5a0663a1149c10bae1f2354ef38c5f811c319a94a848905e77a1cc1c73827ad8db779fd68db8150f24d945637097ec2998ca82114d16990ac96","ssdeep":"3072:r59TfJWvb3aGRbyo4bGpLsev6nsBWvb3aGRbyahvN3UygkdUBWYfYWvb3aGRbyY2:V24CNvms3gYfWry8d","tlshash":"b9c441d0a2506412c2691f91446bd08ae32dfdad7c4e016ebf1becf37ca4785552ee3a","first_seen":"2025-02-26T17:22:17.357303Z","last_seen":"2026-08-01T07:16:05.212469Z","times_seen":186,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/article/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.451Z","timestamp":1785568275451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/basis/article/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjuQt%2BCzgndoTlLN8ZrsmwQpFHfeoj9p%2FLe%2F0siE5CbkS%2B0OQebe%2FAjDiKGnjggP2H5pU35idX8o%2BCa22NjfQkA6Bw5%2BUaEPndhoQJXknIIMyE78B%2F%2FPzvRzEgO%2BhFYrY%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307199e2a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1031,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:27.440Z","timestamp":1785568287440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:27 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNCH4Dp%2BVrMpLYED77eAfmUjHVALEX7j1hRPRTJ843pyw61X5V45eGEWAWhlVnmvFVAhrIMvFU9QdT1wEJxjID8it%2FqpYD6d9fK84wQqpioCD0uh7xVPZ%2F7MH3DuEDZ8eFQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243076489b01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1015,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.ethersproject~3622465b.539abfec.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.055Z","timestamp":1785568275055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.ethersproject~3622465b.539abfec.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"b324d1574fc9436b4f45c36cf67987ea\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bl6kanSVhtRteYfyVcRUoPE0DV3lMN904r6yNjTZlKrGQ%2BFpEgC1Rqolbim3sKzI%2F7xLqNsHPQAKB2QBf5t7YYxWwB8m%2FMvj2o2Iiq6mT290ffMC4IBisBSfYP8yyXD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307171e9c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177930,"size_decoded":40990,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70a84ce10ac0f068d6b08d7f20552715","sha1":"e52d54ae11403afe2ab40d6283a32940f8a9bf37","sha256":"c5a2ee73651bee44272241b55e9d2a78299e5fc36715418e10b969fac522c827","sha512":"ea3a12e10528ed92dbda1c1a287b2c9ad4351b259e5f42ce86583d0c745a45ae671630fccad01334aa278e5311f5adfa6344fcf82b34bdcafe0f539f8448cd23","ssdeep":"3072:FDzrD2Z+npPP1ET12DgWIvokDzrD2Z+nYZ2MuQS3:NPPm12AIU3","tlshash":"2904b840b370b02387992a94092b504ef27afa7d3947007cf558e8f67cb99846a7ef35","first_seen":"2026-04-28T01:22:39.314064Z","last_seen":"2026-08-01T07:16:05.229486Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~31ecd969.f4f547cb.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.062Z","timestamp":1785568275062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~31ecd969.f4f547cb.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"c7796c39343f08fb3f3bc8a352187a2d\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Icc6MnGEdqioKMMqbKr5KnckBXgkRnHR9nPqnQZ1zgZhOdyjxZeg%2FmR5MH7OjsGm9cTaA19o4a22bsy5XPcH9ijbPhI6v6o8auy2Z63GXPPX6LG1h2JasMIQXEYkxIe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172ea149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321796,"size_decoded":66145,"mime_type":"application/javascript","magic":"data","md5":"70e1fa0126cc282852cc7eda33cba682","sha1":"9579aa1ff8b9d4b72413bb0cd8c4703bc0b78bdc","sha256":"d0fd42817722ce4797960acc244f5cd5fdcc4d3bbe3224e013fa01e46ce497d0","sha512":"92b321790e69d81df37e30bbc86e4c71b3d6dd6f7b9ab30c75a9c235751a936eb661cfc75031a49b45c96f67af8e4ed262a01da24ea5e7c28eb9e58cc7cf82f5","ssdeep":"6144:xW2a9xeEun1Xpbifl3/AmWnCwhq11WcsJib/jBhVX:PasMDX","tlshash":"ee64d980f674b052479e3aa4096b100ef27abb7d3447407cf654c4f6bcb99c86a6af35","first_seen":"2026-08-01T07:12:04.2424Z","last_seen":"2026-08-01T07:16:05.211859Z","times_seen":5,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/config","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.133Z","timestamp":1785568275133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/config HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5NzRpKpy983EW1QbeWnV%2BUIQhunrnGLNhIxI5lLfiUeVL2HUAtFEs2q8w04k4XIW05cMN3B9eCP21L0pjqYN1VmsPSfEHmUL70CBQEjHm2WWoLGJrQE%2FN1l7XyFBZwCOI0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243071a0e3a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3199,"size_decoded":2208,"mime_type":"application/json","magic":"JSON text data","md5":"f10553356b5caa667774d4292bfe5c21","sha1":"b9d9081fcdfd82db243832da8db665cd9ee43e2b","sha256":"3de77b9b9d5f76d67227470f3795a9975c5a344374916f501abfcf33ef60ef49","sha512":"75b866fade6029e6038132267f498dd0db91b4642ee564a82c9d6f70ec628ca1f154dfb6e409ba5295ab3d7a191a36dd501c3a71c8ccdba03dc04d516b4b91d3","ssdeep":"","tlshash":"1e61c7680594103d6bd70ac4b23a3e59cf7ca553b805320de6ad08907ad3cfa122d6eb","first_seen":"2026-08-01T07:12:04.243319Z","last_seen":"2026-08-01T07:12:04.243319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~ad1b13ec.e9342f68.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.984Z","timestamp":1785568272984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~ad1b13ec.e9342f68.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"455e72a002e79935b6d90186615cd349\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyvhYXy%2BVW8KxmDTA5Kds7zTG6JlgjJJD99OT%2Bbbnhij13p6uNJJUCoDcooERZqMmA%2F2mtaGK0WcaC1DrBOyyh7hkTzdFmAFF6RSGaqu%2FZVE168A3MS32YAQ754p%2FWJk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a2d6c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243216,"size_decoded":70982,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50690), with no line terminators","md5":"79cc94f86a57c964999c05242718a48b","sha1":"2a44a91175f5164537927c45eab67df62726fab9","sha256":"60e4954e248764a3270a22b23292c9c7dfe760fabf6f282035290549a955a9fc","sha512":"1c1c409efe4fde1eb01db0073c1600fd19e6215ceb68dffb87688b934ee4d4df1d24c50156397fc48e58a08344d7ab0ab0457a6d31efb2adb6aef0f0878e5480","ssdeep":"6144:1V7gV6CQyiAxPOgQR4EEErJGMOlEIjT/AS3AZWYQ/Xw2:1V7gV6CQydPErJGdECT/TX","tlshash":"2934f70119e97018473d872ed1dda119ffcf946ff390cfa65be4463832817a29e8276a","first_seen":"2026-08-01T07:12:04.244309Z","last_seen":"2026-08-01T07:16:05.225085Z","times_seen":5,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/pcDownload.726d6f1a.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.418Z","timestamp":1785568275418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/pcDownload.726d6f1a.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d4e4851745d2c60ea0ea3e67f5f4972a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7HKn2l6JN28drDg4sNbz5fIZ4ajLUDNgbQ%2BxtTjU07Qbce2y4cq0%2BpKeCKWNSL7C3ZFD7lcvJNjcu0yEZ%2FKdti7SjRB2GO%2BRmHBYIvrPMuhSYNIatF5fHUAHYHywgvl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307195ee949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 347437\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":347437,"size_decoded":348094,"mime_type":"image/png","magic":"PNG image data, 980 x 604, 8-bit/color RGBA, non-interlaced","md5":"726d6f1a59f2afa5e9681aa36bdca93b","sha1":"7a8bf977d1d665286a840c993b0bd6ce6c0ebca5","sha256":"bbb9709c63e72cc3c3c4cb4aa2346c6ab6fc0bea8d21039bddc01ce8c93539f3","sha512":"f5afcbf35a7624f1dd50591c1437925d6b523a46ac317b0eea8820a5cde5b165fa08348d7c754d37d65d0af7dfce96279e3defe3134788a4e7e586a0400ae3f1","ssdeep":"6144:ABI3kGPSX915vB6aKK8Jz9t2dp258+zybfIPpjYsuzMHOlbSb1RdGsgBpxbLrohi:nkMSN15psKcz9MTx+zqvOOlbS7ddqxX3","tlshash":"6a74235e0f100e9a252d0a6ff4d3756370e07cd069fba436e9a16de524c23bf8a7452e","first_seen":"2024-12-29T23:33:15.235438Z","last_seen":"2026-08-01T07:16:05.200328Z","times_seen":195,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:20.353Z","timestamp":1785568280353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:20 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pu7YlX5ShDW5OQv4Dhgv8WF6u%2B3kFk840270k9YBaPYIebnX7kmoT8OUbF0OSEJ4uGtL0CbihigiW%2BJjCreZeP1u2PqrneJqg33cs%2BCEkRG%2FKMXgPjHfoQzsw19HWGWmCsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307383abf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1017,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:22.359Z","timestamp":1785568282359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:22 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=eQzuIlUXIAztOKmFP2HwRF3tylKJ2TVaOjJOgWiIrY0-1785568282.3630884-1.0.1.1-cMhSoHusgIdF9NbfGBfuO4kfRMlQMvQ8NHt5Vjud3Jc52kW8Nhnd2HN76HN7BR38wLotnWORQ9cZNVOHaUOxcjimMIWWuzWnkYWfBMHYyjHHZxmdQ0QPdnQcRJwxgQmfCcLYvt0CS53TTK5z03KBfDYVDfPgVxjo42DjX2HZ0_oFjvt7Nz2hLsJ3Nkw96Auy\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=eQzuIlUXIAztOKmFP2HwRF3tylKJ2TVaOjJOgWiIrY0-1785568282.3630884-1.0.1.1-cMhSoHusgIdF9NbfGBfuO4kfRMlQMvQ8NHt5Vjud3Jc52kW8Nhnd2HN76HN7BR38wLotnWORQ9cZNVOHaUOxcjimMIWWuzWnkYWfBMHYyjHHZxmdQ0QPdnQcRJwxgQmfCcLYvt0CS53TTK5z03KBfDYVDfPgVxjo42DjX2HZ0_oFjvt7Nz2hLsJ3Nkw96Auy; report-to cf-csp-endpoint\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EjBbHsSl1xgPpv1wjwl74dU3MfNut9bP0Y5%2BpCjW9CFQdnNHfWuGt0QkAkvfltPRoGNP0vz9QIXP2VbJdmCPN3M4kZoKVBSK1HiJQX2sszaHtPSbSC39WiHmdzhQHt75g4%3D\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=eQzuIlUXIAztOKmFP2HwRF3tylKJ2TVaOjJOgWiIrY0-1785568282.3630884-1.0.1.1-cMhSoHusgIdF9NbfGBfuO4kfRMlQMvQ8NHt5Vjud3Jc52kW8Nhnd2HN76HN7BR38wLotnWORQ9cZNVOHaUOxcjimMIWWuzWnkYWfBMHYyjHHZxmdQ0QPdnQcRJwxgQmfCcLYvt0CS53TTK5z03KBfDYVDfPgVxjo42DjX2HZ0_oFjvt7Nz2hLsJ3Nkw96Auy\"}]}\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430744cd0c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":2257,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:29.443Z","timestamp":1785568289443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:29 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOrL0dO0tgu0JloLDzUqZ1p9Hzb286lC5b0webm82H9dkbdrcFa%2Fkae%2FEcrghGfUylPUlLzZJvYtsEC1o%2FypiM5PBn2jGy25XcDqKsTbOZKhfYJe1blWBLjC9eHiYqkpsKE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307710b281a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1015,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:30.446Z","timestamp":1785568290446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:30 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRbM5GD5%2FZqgg%2B5YGhwjniZsxnEMXT%2F5zGZbLX6F2nlpyb6ur%2FU%2BP7yRWO7idFB4dk15mohv33BhoRbWqcv%2FCadIPAdP57L9sg351okHKusRnq5ORkIS9wwXjv78CXrGDyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307774bd91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/css/app~d0ae3f07.b9256520.css","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.966Z","timestamp":1785568272966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/css/app~d0ae3f07.b9256520.css HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"a20ff495be337ca6d8d2e8078f2600fc\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bovx3JdGRxRK%2BNOegDJHt6O2Uyl%2F8ROqh3qfxAtHYm4DL8jrJJkDYqB1yTve9sixLbtbMA4H0ZS29HL%2FnnXcdAOHTWafphOFNOwMNPONprx6pmADMbfRjcVzrDMd404v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a0d6149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244565,"size_decoded":41816,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f1ad1a7de904f5ef4827134a48a0b0f","sha1":"69c3a366e9831077f9e57f7bf13ef6bf90b30060","sha256":"6dbef058bab13a97eb4735657ec1d150ce1a832c6b69949b945b07fcafd297c1","sha512":"9f751564d3510acdd0986b9b83c359b0224e34e741b66a191bc87e7897a22e876189fd6f9df5f4847a03c9f8edcc047e44a3bee98f5c490eea7f29f33bd2753d","ssdeep":"1536:X28Y7SrW3YeWXA1u9w4HCe/l4vEIk9cME7eMbU8OLisPFkYu8eK04ffj3dX0LIcD:8jpehffj3dX0BU27kIzpuS3ZS8","tlshash":"1c34a61a9f17215b522bdb6976d0bac80f28c326d5224b6efd53380ccbd76891163e4f","first_seen":"2024-08-02T18:00:10Z","last_seen":"2026-08-01T07:16:05.230687Z","times_seen":692,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.babel-runtime~7da828cd.7508b70d.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.993Z","timestamp":1785568272993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.babel-runtime~7da828cd.7508b70d.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"6b2cb787fe1d0b37d99c3b93d1c60719\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NY7RXvK6gqIjItNIyCdXCzvT%2F7bWS6VVIqJRrass6B9bEVJqaIgvVOcAHueweRTq24sRsGMRBxivs%2FZ2fqZ%2Bp1H9AFzOzpWMKVdiiCZ1MYCn4ugp1DgsfDhsK8TY0lWk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a3d7149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17153,"size_decoded":7487,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17152), with no line terminators","md5":"609c5f0a3d2755859d5044c58d448a44","sha1":"757c5cd0d945fe9d7caaac5f4244b45dd038226f","sha256":"e55d2e548a4ddb01b596a730e11c30ae5bbbb2716e8ffa242ee8eb1c7f057f06","sha512":"c0436fa17e33e243474d65844497fe9477d700f7f00efcdf1aa55ffd8898b3427002bdf65812ad558a8aae1108eb09afc8966cba6ae92e61e83a60ad07d0db2d","ssdeep":"384:GhGcyqHkhUVaInIaHfof3gyGGKqiv9BWDVpo6S:+mmwXPKRV0sz","tlshash":"c372718eb1d2b05416b3712c022fb40af3b71958b85b99d0e32dc1e5ad7684f50b7e6e","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.225622Z","times_seen":930,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/sort","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.445Z","timestamp":1785568275445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/sort HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHGRD1zl8LaHPDyAquc358N4tgn%2BPsD5HKQjjxVaYa3EK3d10TTthbJ2kCGzAf38LEcBXuqcWimYMCNl0ViOOWe7onDnhwa2fUUNUPbjzOIARdioUMB4hP%2BSifDQ7mzRC1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307198e291a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1013,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20250613/0/324092863350927360.png","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.070Z","timestamp":1785568276070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20250613/0/324092863350927360.png HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 382247\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14B200F238320A32A7\r\nAccept-Ranges: bytes\r\nETag: \"BDC4DA523A9463311E27E5B56E8589B6\"\r\nLast-Modified: Thu, 12 Jun 2025 23:49:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8039959888657474300\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vcTaUjqUYzEeJ+W1boWJtg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":382247,"size_decoded":382797,"mime_type":"image/png","magic":"PNG image data, 735 x 453, 8-bit/color RGBA, non-interlaced","md5":"bdc4da523a9463311e27e5b56e8589b6","sha1":"3a5151ed59732b38436dcab02efe5fd060dd52cc","sha256":"ffa3a99a978eb36c62b56d7aab0535a6cf227078ae5b2c911a7295d7dfa7a21b","sha512":"46742362feee36db27c706e3ba66d134557e6dcf15462565217da023c5649e9630e2df41ee3173e0472b0c5931c17d4833942fe9ee5e4705c64ef0e71076bfa7","ssdeep":"6144:ypUInlwN3cusM+iphPKhbmSRzz+N2J5RyHa8Bp61L+RGP3AsgBaHF94x69pPye9R:yqIy69uphP7OKNwRyxBuLNv2y+xipPyq","tlshash":"578423f5430a6ab05405a80bb0e79e4d0f69eda6a180617fc26e8f4dd53eefd1f8c065","first_seen":"2025-06-19T09:56:57.591448Z","last_seen":"2026-08-01T07:16:05.202261Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1243,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":184,"receive":533,"ssl":352},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/article/detail/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.442Z","timestamp":1785568275442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/basis/article/detail/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FW9civFUr1ihz5abluuJepl3z%2FjNL5VWaoiRyQ4pFgbyqmsNM0n4GguvKZTXyeCPjOGBWJu8%2FOm7oVLsCglHcUZHjH2fqNP6RtzafJU0ghRNlghj5ktqWkWeKF3rkfoTljU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307198e281a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1015,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20250613/0/324088681390755840.png","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.072Z","timestamp":1785568276072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20250613/0/324088681390755840.png HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 442699\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14216B353339DC35D0\r\nAccept-Ranges: bytes\r\nETag: \"315E6DECA40548F1117B0B8E1115D236\"\r\nLast-Modified: Thu, 12 Jun 2025 23:32:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9502493356812390420\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MV5t7KQFSPERewuOERXSNg==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":442699,"size_decoded":443249,"mime_type":"image/png","magic":"PNG image data, 1920 x 690, 8-bit/color RGBA, non-interlaced","md5":"315e6deca40548f1117b0b8e1115d236","sha1":"2522b38f6e13fd64d023323288cf15fbcc4f37b5","sha256":"e04c73d6521a94795d194c188ade1074916015346de619aa246cb3b30326adb4","sha512":"e89404c19267b267040ae6f45ebf23ac7b8db606b115b630b356877b4ffe52189278ba2e651319b122cccb296a975d700e35d09f931b8d0b2ec5c10e5e1efeef","ssdeep":"12288:c7Nno+rf/i63nMbc5EifKp0IZbSpaCn4IVqosc1j804E:c5J/i63swsbSpjuor1YY","tlshash":"7e94236fc012cc4ef6ae4435ce521b9273b41566dd72e4343ab4ab88fa946ed502f682","first_seen":"2025-06-19T09:56:57.608532Z","last_seen":"2026-08-01T07:16:05.198729Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1263,"timings":{"blocked":0,"dns":0,"connect":173,"send":0,"wait":186,"receive":553,"ssl":351},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T07:11:12.914Z","timestamp":1785568272914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gxmcoinwb.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"c160645c74d9c4ea34638a2b4bf696b9\"\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tl2p7BrRBPuXVz59DmafKgFBGD1PAOJNd6ZeFNBgSrU1KukMhcscUA0MI3%2FwFrvU09ZCLyPPy0w%2BJwfXLAMLAck9NYk%2BvaOxZbwNzxQ6yCzP%2BLSJmCa6UB9pSts5F7Ji\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2430709bd5c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":1882,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3425)","md5":"5821ae1c19c1138bb5e28f215857c96b","sha1":"2c854ab3e6959c7aa031725c4dfc1b26d441f8c4","sha256":"4d3ce150d1114324ac064dcb0ed4349fc7cd727651b0e28366a788570399a099","sha512":"b2e4a41d777b99c95d8018f3f449e973a704516027b04339e3d066f25d607415741627303057040b5d17784be1210d18b8d2dcb17d5827efd44ebcffebc9fa10","ssdeep":"96:n3IU/3VBHo8uT40U3QJ110YeYFQ5D7j3MB6qak:n3IU/3VBI8uT40U3i10YdFQ53j8B","tlshash":"8db16e54ef09c5ffe834ad5ae769b478884aec6f2e34d860c0b50b95d564fc82b79803","first_seen":"2026-08-01T07:12:04.262904Z","last_seen":"2026-08-01T07:16:05.210892Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.qrcode~029d41c7.6ae6affb.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.058Z","timestamp":1785568275058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.qrcode~029d41c7.6ae6affb.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"f51e90aa55aa2b5a2fc82b37210ae07f\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ooix%2BAnGndT5WLfkBVTxUv14t%2BNf5wPproA4%2FpOxnpxGkkKP0MmYGt8TzygUMzeWLHcLfyfJvcc6K4dtqeLkeBU9BorSiv3QaVbPiDV9qKAVlC9GNAzc2oEDNidNPq2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307171e9d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23338,"size_decoded":9757,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23338), with no line terminators","md5":"bfd2e7fb4632d1893ce2235e8d68c093","sha1":"c48f948f01f2e4600d6078202ab333c654e9fa73","sha256":"b956cd1d5d038a89ed19d01a661ee7bea8f72ec7adb6f180ac0fe88e38579f2e","sha512":"42cc0e93e8959ff49d667f827b1997f84d37f9d0b325c3cef60c310b63b2548ad4b791efebdb642d5a4d2480415ffc1772b207acaa05362eee9c19e324c29e31","ssdeep":"384:E+ITTIBANS9X8OhLpAFRVqaem1QINHqBRF42J6dKFyUm89F86NFIZTSGCH2y57bz:CTTIBgVqap1WrJ6dK1m89+6NpGCH2y9f","tlshash":"eaa2d799b39071ab53d725d6002f1405e1faa864381a45f8fa58d8d3bd78daa80f7f3c","first_seen":"2024-06-09T17:22:38Z","last_seen":"2026-08-01T07:16:05.234124Z","times_seen":1003,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/css/about~defe45ab.72ed6144.css","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.068Z","timestamp":1785568275068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/css/about~defe45ab.72ed6144.css HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"f626b5530d8df83f6f0d6e3411cd2c10\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktBMWsM7gfWHWnWGwUpsjDXy5Wy%2BAC%2Bj2jFCpPrZV8qCjCof74spNUQNID3BO6HoZrlZZfjpfMW6c%2Bpauog4wzmYLIQ%2Fiq8TDrm5JyCAlo%2BG8vmlzSzHbI3WS28v7tEJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172ea549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159771,"size_decoded":20663,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ec56556cc349ca30c808edc26874e96f","sha1":"7dd3b05511cb4c5271d86cebb85d9fcf7fda2225","sha256":"82ad10fe37d0839a0e80d336724c7463ad329213f6efd316b2a98bac54eae461","sha512":"ebf3de388249dc36617f446b5a2df5e286aa1da270cdfd80ac67c758054361d9e4633492a9f0a5f8d9c1bb44a7e616cbe9f7d923cf88567d39fbc11cffa0b409","ssdeep":"768:05pD6D/JanlgkPKA4GG5v7+8rFU6xqin/pYkWszHog7ew86r1W5KK86ylLLdOLP3:05pD6X+8rFU6xqin/pY7Jp","tlshash":"def3732efa6f2409603bc61275a07adc5a18b3bfdb06477ca4877812cdc76533527e98","first_seen":"2026-08-01T07:12:04.276703Z","last_seen":"2026-08-01T07:16:05.234702Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/user/phone/country","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.140Z","timestamp":1785568275140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/user/phone/country HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Woc%2BKtau73IpGY2NEui%2BaR%2Foyy5%2Bdq3CwVPyOAhdYBKtAONyysR%2FEVxaYAJz5BYzdzf5NYcSASxGQ4FtRrExUoCFKcK%2B2RRhzjCXLEVg1Ur7OXsH9iFup3L1fVyvm1KVSo8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430717ae021a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/config","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.141Z","timestamp":1785568275141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/config HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vKcKVcb9lckK59gDsdcA9DGY%2Fdv3ZqHMWg9amDFnA7evrCB%2Bj5nXYD8dv1mTCdS0HJM9OS4ii%2F4WWz4A%2BOD4FUsJT%2FYZOuIUnbi2aEhpyIA9Po%2FV%2BT5TyBZ%2BNAyZ%2Bgf1TA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430717ae031a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1027,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20260508/0/443273807850352640.jpg","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.336Z","timestamp":1785568276336,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20260508/0/443273807850352640.jpg HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 81694\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14E173EA3035A839A0\r\nAccept-Ranges: bytes\r\nETag: \"3CA417B30CBCC6A0176E739455EA6E2E\"\r\nLast-Modified: Thu, 07 May 2026 20:51:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4467549376894680472\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: PKQXswy8xqAXbnOUVepuLg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":81694,"size_decoded":82243,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 960x540, components 3","md5":"3ca417b30cbcc6a0176e739455ea6e2e","sha1":"f5e1cef35453b103339ee491b7a4153e710514fd","sha256":"0508469cc8819e9d9853d5e3bcfed584d7cf36596cd3cc4e7ba0f722cac43768","sha512":"c292f07a173a65c2bc0ffd73a70247398ad98f012fb9d93e0e402e1ef15615e6865a8283cc7228967fc57b97d394bfbdd48b2435fcaa88561185e9a74627cede","ssdeep":"1536:MeJFjVbvIitHdK62MNM5kIOd6HP43jmvfHPFrmUFL3fpVY8+p2Q0coPP+:MeVbvIiXKGMqbjmPBB30gciG","tlshash":"4a8302ed1d2502f6e48733bbc58d49c9db12be9cf9d22a0af4019453e87a85c75a833d","first_seen":"2026-08-01T07:12:04.277735Z","last_seen":"2026-08-01T07:16:05.207784Z","times_seen":5,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":483,"dns":0,"connect":0,"send":0,"wait":182,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~d0ae3f07.8233b343.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.987Z","timestamp":1785568272987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~d0ae3f07.8233b343.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"4b0a52499e19344694bddfe39b0372d6\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sg7jXVZH1ZaB8NOd%2BI6Yz15GIhBXZoj00MAFtY1LOlyl11npfuryFUSiWIA7eDYGt%2FdNTMZM1pcz4tcNP3r73XwMvncAPd3kdJuipVui070s%2FJoQ%2Bgz%2FvgdkKDCj%2FaRm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a3d6e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212534,"size_decoded":56777,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49509)","md5":"b4f02f6c463b3c3f3dd8d8208fed3560","sha1":"8858138a8a523f6b49a553db252ecb4a9a295635","sha256":"579d4d29eda2e2bc4d2c34397284ccdc8b0bfb11b3bc4386a80edb1ec26bd7e7","sha512":"6c80e38f9ca464107bdb0bdd4c4d2d0120e045183f07d0ac12eeb735b16fbd9448f39aa74bc17f73dce7675e226e99170e4be2f9ace3af8708c7db90dcb732a6","ssdeep":"1536:J7fExZz7NjUmuBJUgx1IfGez2LjBpVf2IFV/Dtk+RTblEfu0mAK4/lrWpoZTmrJq:KxZtHGH3B3pE+RT+u0mAR3aSR","tlshash":"0b24f78d32c1f4a147e361f1502f250bb33b596c640a9098f7b8d4eaad7894d922bf7d","first_seen":"2024-12-29T23:33:15.26239Z","last_seen":"2026-08-01T07:16:05.19203Z","times_seen":765,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/language","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:14.636Z","timestamp":1785568274636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/language HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:14 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OiFBqF9gB0FsaJ97O25Bp1mouHXf%2BaKDZDxmeXA9BVv7NKIRf2BShmiHcGBcHizggmazHP%2Fh3CK1U4aoeSXcnzLR8qkX6vNVP3%2Bmjmz2%2BnCLxN62Zx%2F7IdsTWjOctfLTQNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307147d8c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1019,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/statusSuccess.8cf610f8.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.137Z","timestamp":1785568275137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/statusSuccess.8cf610f8.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"9f63e42f327694df27051eda9e209f21\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NClsvnNhzXILQNoW4d3I3E5W7n7UGbJQqyYCdyEi18d6h51%2Fi58YugWEK88Gg0Sgck142HGVPttrOzfU8h%2BzdZxM%2FLVTfRABqdqbamX7%2BK%2Bv26o8ZijnDuqNBaB8qhsK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307179eb449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14895\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14895,"size_decoded":15553,"mime_type":"image/png","magic":"PNG image data, 109 x 78, 8-bit/color RGBA, non-interlaced","md5":"8cf610f83274c088e8a7f9e95a34f1c6","sha1":"38ad2d916dce00f97c4064b862ca0d7c29342408","sha256":"9c310fdb1d71eda616b6c7dd1dbcfaa77641e95aa600d8f4210867ecf3c45ad9","sha512":"adae719f03d7cd5d0a559fddbbe6866e0d8483c2a102ad53579de48a4c37c83368259206a53e02396b6dc7f5cd871de622980c68dc1f655ac6f2ca4de8c62341","ssdeep":"384:O7guZCWGxh847Lk8HR5aZU9tjpZFjpZGA:yguo/xO4g8HqZ+pZoA","tlshash":"5e62c064fbc0a0f995b5bd833f3b3a127c9b99027449e5322a9bc5d2239413cb0a1cdc","first_seen":"2024-12-29T23:33:15.226974Z","last_seen":"2026-08-01T07:16:05.23359Z","times_seen":194,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/mobileDownload.e44d9e95.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.419Z","timestamp":1785568275419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/mobileDownload.e44d9e95.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5bc884ca13987dcd685ae85bef1af7c4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5DM4%2FRLzWB%2BPERNfadoBPmVdF6kGXh1q0FqlWmu7Z3%2FPkOYDOjxPUpKqlscguItnjxEltMQG7SkL4gudSPMo2g7ZfiuQdie1imQgVNUvjFz2KXJb5DPYKfIKKlULwkw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307196eeb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 153641\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153641,"size_decoded":154296,"mime_type":"image/png","magic":"PNG image data, 492 x 564, 8-bit/color RGBA, non-interlaced","md5":"e44d9e95cc43686a49ccf40aa056899b","sha1":"f7951cb3a6959bba7e0626e54f068f6c366fe6eb","sha256":"f6300d95d06ac83f1c292f001f3f970cb33fe180847ba3e5a10c17eabdbfb58a","sha512":"6a9892b0a3d371d5ce2a8e27b44e8b94d7ecf57ac3453e0b7a092fae9889266768445476506eb393e61511e628350ee2f21252a7838ae678ec7c53fab0918016","ssdeep":"3072:FDfTYkk1o9UeF8g2RzXvsamk9uTZMWLOJtMnZqoG8DUM+0sq0DrhKT:UoU90E9R26ugoGyGqKFKT","tlshash":"f9e3123dddf8ec50a7ecbe1132aa69ae556a41f29f5137ec08c1f8d9121410ea924f91","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.204624Z","times_seen":935,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~d44a7288.264d0d48.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.074Z","timestamp":1785568275074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~d44a7288.264d0d48.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"3d092f76445d1ad673eba49587afdf08\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFwb3ZgiHD8Ni5UbmrR5lSgVOzAuMghMpQ7nDeKQAkuq6ZGnBlh7V5KItO%2BcPgAcFDaBra3ohIzvNCvV1IAuBKoWVTRmuH6YNZsqi5uqsb2UyejVLPL6M8vrCoLowaQf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307173ea849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226929,"size_decoded":38359,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"552ebd60cd08f0850ad906cace8d1575","sha1":"b3c1abe45c965f48c31eacfaf4d6de49214ca781","sha256":"d60e08e221846234725bc7afc4da685608ce1fbc9cc4bdd94f6eb68aad5f1dc8","sha512":"37cd93c1191a8ae5a7cb5ba0b2332f8d553c6cc6c53d4866baecb3b45a28bdcb823dc959e309b10f6b616c564078c0d744531dab56f892b3f62efebc498d3c44","ssdeep":"3072:TpnUdPbY+o/O6WH/lEECSaxL50o7+fIbAo:lUdzY+36WHdEECH/J+fI5","tlshash":"c7249409f58be169cd7e9161601e2938a0323fe89415c052f734cc95aec8eb8671fbed","first_seen":"2026-08-01T07:12:04.281483Z","last_seen":"2026-08-01T07:16:05.231284Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/Loading.b098319f.gif","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.136Z","timestamp":1785568275136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/Loading.b098319f.gif HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/gif\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"554653adc7f2fd4dd64c2e3e91964c23\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSH3kt06r1GdVcqz22CTCbNGiI%2FjTiw1uM2YlfbTboUBVgDGwy%2F1RdFmIA6umd%2BYAunrWAAg0K%2FyokHShPXfQO37XxjVzoN%2FQvKzDGBmkyNyP9c13GuX%2BzY8pqffaqCP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a24307179eb349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63696,"size_decoded":64356,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"b098319fe47bd019cd653bd36cbf386a","sha1":"045ddc21f28a8812ea89741c07c7d180ce361ec8","sha256":"99efc3a3fa7e98ca2c0041273ab0ca072d1c6f09fe262adb26638d705d1fad32","sha512":"8604ac4fe4c5ea3878402f969a6795fc5260fabfd99f90836ba99924c129657ccf392dc791ba5a01b7ef93f94ca02f60b9271b42b908beb7ce7b4634cce1fe98","ssdeep":"1536:3bx/4nMpLaHEB4Gs+hNyb6qhbstFBFbj+:3bx/4nMpLkEGgWbyBFbj+","tlshash":"d8538db8f1bd5e52d8090034305d52bd0d5ec0ace9b5fd2332a8bf9a8b8a4753dd0ad6","first_seen":"2023-05-26T08:05:36Z","last_seen":"2026-08-01T07:16:05.210388Z","times_seen":1220,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/fonts/element-icons.535877f5.woff","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.383Z","timestamp":1785568275383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/pcstatic/css/app~d0ae3f07.b9256520.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"df38047460aa4ac8e3d8ffede05ed600\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJrNnVwEZ%2Burc3ZmQP0Jvlynk%2FUNzQDdvTTMQUvMAJSR02FmnZXciJSgv9PeXX4mb2kMmaU0iT3ojcvoDX8bdpc9JFIeehdFpgKlJyTNymPdPJp1wSiQeFmjjSzjTGoT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a24307192edf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":28855,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-01T09:10:34.414972Z","times_seen":29281,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:17.221Z","timestamp":1785568277221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nContent-Length: 121\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":121,"data":"{\"period\":\"1min\",\"symbolIds\":\"[\\\"52946918015242240\\\",\\\"52946918157848576\\\",\\\"52946920854786048\\\",\\\"52946921785921536\\\"]\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:17 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1eCwYIFWF8QYo%2FOPkPl1oFSVR03YRMkTziW7baIsthikVFhfu2OWvT81QMCWYT0GWqyZKrXaqr8n4uyTqa7qDTksz1Fhk0BgJ%2BUCT%2FGvIf4C5eM4tgDvOTMEHu65J7h619Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a2430725f8321a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":1254,"mime_type":"application/json","magic":"JSON text data","md5":"53bc110599074ef74e71d19dc2d6399f","sha1":"1884f13e3b0a7108a3fde3c9910e496416c96d77","sha256":"5d563ab9ddd70cf1e16f25cd15299a6d05c02c3d0546d892e13d8b09be8988e5","sha512":"fc6bdcc299da89bd088fb06369594161828e72d7f04710b1c445ba991eb72fee3cfe912a03eedbb2c3ae8e87bb2b4b1145b72c248afb70544601e8160ac34566","ssdeep":"","tlshash":"0b21c1516560846e891532c27ca3bf5a1e3d00a5868e0f9882c64d2911e4df83f0bfb6","first_seen":"2026-08-01T07:12:04.292261Z","last_seen":"2026-08-01T07:12:04.292261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:23.362Z","timestamp":1785568283362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXb%2BTWjAe3YD9NZ%2FSSLOrpfcw1ynA1RQa9u1sRBCKRgBxJdrPH24Tix1KdfIVOu4k1Uu%2Fr970JnVshGFoByhiLjOfx23sPlH0YQYpLTUdE2z5%2BzkTuimKjaBZjbL9Hf59pQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243074b0e471a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1017,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/statusError.edb8d705.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.139Z","timestamp":1785568275139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/statusError.edb8d705.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"376b6e07966fd53aaa51446aa3f072a6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rp5IVLszKFJOFOPNWaNjsdf3Cxr%2BLkRxhH%2BIGa9%2BBXDr4LyVbZC3T%2FvRp%2FF3J82hdSPJyhqc0VDqVJ%2FGN2UTkihars3eXlf%2B%2FV5biZ4BZy0rikv2sbuISlC2vmpeSshW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a24307179eb549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11959\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11959,"size_decoded":12623,"mime_type":"image/png","magic":"PNG image data, 100 x 105, 8-bit/color RGBA, non-interlaced","md5":"edb8d70516764ba4bc2e6a1a1d86473a","sha1":"e5f374c48aa50f27217309d9f5315a673f34d277","sha256":"f0c6cf334aad7d20c9f3a315c876a6abadc40fb694b22b4612e021e44366738d","sha512":"5639d9db3443b1beeacb8ec8534ee1120f443789a71721d184497a64eee9518e8009fbd9d7681770982a7d67deca708eead56c2378941a83a2373d5c3f8c38e1","ssdeep":"192:OSzkn/nPKxPkCzH0yunHDe0h1a6piCOacX4beFZriIJw36NWvslHy6Eos/CotoGw:xYnfPKxsCzUFDe21a6MnHK6SoHynH/C/","tlshash":"bb32df40fe152c13151cee4165e82e2b8a721dc18c80fa68f9db981e3bae0679f5e4d5","first_seen":"2024-12-29T23:33:15.233186Z","last_seen":"2026-08-01T07:16:05.199801Z","times_seen":213,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20260704/0/463974898357288960.jpg","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.333Z","timestamp":1785568276333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20260704/0/463974898357288960.jpg HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 160665\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14AA02983536FD66C2\r\nAccept-Ranges: bytes\r\nETag: \"468D1F43B50CC169A8DFD09787B0762C\"\r\nLast-Modified: Fri, 03 Jul 2026 23:50:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7945758172266109469\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Ro0fQ7UMwWmo39CXh7B2LA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":160665,"size_decoded":161215,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x600, components 3","md5":"468d1f43b50cc169a8dfd09787b0762c","sha1":"31ff4065b9e5f9482d4346a727615e8ee37d460b","sha256":"efe0aae1908047280c76ba3ab014667a238d6b63526c329d30e3aad6293833ac","sha512":"4da1690d9285579eff10eef777b30252ab7e84456dbaa96e7b6d3ac405ca502050fd14d688490ef6610b17c55eeae13bef9a6a864c20aeebbc48c31661c3bd64","ssdeep":"3072:weZwMsmb0dOMZ4okTXnxBIlRLruKJm4OmobE6AOyOjcYJMp:weZedZ4ok7xGlRmD4OLbE6AO3cYJY","tlshash":"08f312a12feda61c052d7b05d8778825fe78de4226b9c6b38e1c4cad90bc54cce89d53","first_seen":"2026-08-01T07:12:04.316062Z","last_seen":"2026-08-01T07:16:05.20565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":-1,"dns":0,"connect":172,"send":0,"wait":178,"receive":357,"ssl":347},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~5a11b65b.d02e8af6.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.976Z","timestamp":1785568272976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~5a11b65b.d02e8af6.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"489e27b1c796bc9dfd66cd802067e595\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPlmg60u79BSflzRJI1WBA5jw%2F%2BDV%2BsvaCXdEpNpNxvyB3rHzaVzHDZdsNkkMYeVY8h6na1lndIGGwOAOCUrJo4sH2UxrpdomcrstSxJXp1DRfynblkuqNh2stxu7yVb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a1d6549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59972,"size_decoded":13629,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59862), with no line terminators","md5":"28ced03a88f9eae9e4e2b25f8e88d011","sha1":"482b7052b14f47891ff2a92555cb075d642be4b5","sha256":"18ace426f735490f4352716b9978db953ed9ef30e86154ac1ccbdde18e2bf88c","sha512":"63efc4a5581c3bacab876e85270f95d3f65aeb905055f23e71edbafcc0e811c81598684da433df316309929426ca78ebfec3c6caa989bbf9b5ba01189967b35f","ssdeep":"768:NvL83ISB80mtRs/5kZ7fyjZxSRbuPQTfQL3JqOnzb1:dQ9mV7fyF6MQTfC3JH","tlshash":"244386db2869684fa6784ce9241be94769277eb2ccf786d051e3c5f231cad743201e4e","first_seen":"2026-08-01T07:12:04.317692Z","last_seen":"2026-08-01T07:16:05.19577Z","times_seen":5,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/language","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:14.634Z","timestamp":1785568274634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/language HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: application/json\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=dHU4okS6..PEeZCnovtFdvIYHEWTFZH_bcy6thJ2ByA-1785568274.8448892-1.0.1.1-_IrXN2FGfxAD9VYXzDKTQD_aSZIThnCsxPy7lmwUGJa96s02i1gPBDDlfBaKqt24pniZSnbqAma4EthoyOlamg4SYvl9UA.xXOfxdDgYsm2DC7vN_jaGmH_2YWNB_cmxP60._njt5A4nVvGqfMBqXW380acIykpX1G_87QU8.emBLwvp5TTf4C2odtzYiqc3\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=dHU4okS6..PEeZCnovtFdvIYHEWTFZH_bcy6thJ2ByA-1785568274.8448892-1.0.1.1-_IrXN2FGfxAD9VYXzDKTQD_aSZIThnCsxPy7lmwUGJa96s02i1gPBDDlfBaKqt24pniZSnbqAma4EthoyOlamg4SYvl9UA.xXOfxdDgYsm2DC7vN_jaGmH_2YWNB_cmxP60._njt5A4nVvGqfMBqXW380acIykpX1G_87QU8.emBLwvp5TTf4C2odtzYiqc3; report-to cf-csp-endpoint\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPErIfxOO%2By5CFSYSFxY3DsvaqvA0fTF68jJvgQcYfXnBJMygUlkaC7noWNFP09SlPoJeTgky%2FzEBBTwJzowN9YrX9OJ5I8rAKm0uEl5cbwWRW0bDtfgNPeUbjQ%2F9SRzS0g%3D\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=dHU4okS6..PEeZCnovtFdvIYHEWTFZH_bcy6thJ2ByA-1785568274.8448892-1.0.1.1-_IrXN2FGfxAD9VYXzDKTQD_aSZIThnCsxPy7lmwUGJa96s02i1gPBDDlfBaKqt24pniZSnbqAma4EthoyOlamg4SYvl9UA.xXOfxdDgYsm2DC7vN_jaGmH_2YWNB_cmxP60._njt5A4nVvGqfMBqXW380acIykpX1G_87QU8.emBLwvp5TTf4C2odtzYiqc3\"}]}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a2430715cdc71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":778,"size_decoded":2305,"mime_type":"application/json","magic":"JSON text data","md5":"09d41663c5e1b35c06dca62a43c4b26f","sha1":"a439ee72b47bbe8a24b9fd872b83a8498f7b074a","sha256":"8dd3ede9a72c2ef5aa6172b4c311e8d28a787c0816008f79cc9a25cdb89855ff","sha512":"cc74c07431d87bab0e4833a53ad5b169bbfc1d2ce45a05d656ad1049d9a0adc55da2569c9cdeabb4d9cb87081fb03aeb7e7c171b08a1f9a6c5add95b6b83fe36","ssdeep":"","tlshash":"f50113ce28f91d3e4a58ff3c91178bdf2b58b2a70dde0c4989924ee02148259a534e33","first_seen":"2026-04-28T01:22:39.18082Z","last_seen":"2026-08-01T07:16:05.221431Z","times_seen":6,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20251201/0/386270062851399680.png","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.732Z","timestamp":1785568275732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20251201/0/386270062851399680.png HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 17184\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14E173EA30352439A0\r\nAccept-Ranges: bytes\r\nETag: \"91EA50DDFC26B0016AB450FDF211E578\"\r\nLast-Modified: Mon, 01 Dec 2025 13:39:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10774486985205808499\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kepQ3fwmsAFqtFD98hHleA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17184,"size_decoded":17734,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"91ea50ddfc26b0016ab450fdf211e578","sha1":"28d702a7fcc9b9fdca025628b5d4603e6528a4bc","sha256":"4b70e5e1c75077f72c708b70e310cd8be4ef6a9b54a03b804444b1c99f9c8458","sha512":"3ff4726a88bd16c1eafca184438b0cce71543e43c889e1bdb6b2cb794b8a7b59e88ac2dd3ad962b83d47454f0d91b4589ce2227fa37c8cf6271087afc384e22d","ssdeep":"384:+in0LXT4Sy1Rs4VxFKPyhDeANjf6gZ4+vxjoucj6kggn5yvhCxiLB:J0XkxS+pNcudJ5","tlshash":"6f724b08fa638d789a1c6ed4fade901277b717c4e7d2a144fcc689075ca02bdcc8ba55","first_seen":"2026-04-28T01:22:39.545204Z","last_seen":"2026-08-01T07:16:05.205171Z","times_seen":6,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":0,"dns":32,"connect":173,"send":0,"wait":177,"receive":1,"ssl":521},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:17.223Z","timestamp":1785568277223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:17 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46o5YuOR%2FTWRqyM6t9IHtZ8j8qrrDn4xJ5exN22x%2BL6Wq0fx4U148WjZfN0Y0wTbNMiLxVdIpXLwy3hwWql%2BKn4NnV%2BGMM8VaHmtJRNRJxftnH%2B1z4F3%2FMG%2BFCH%2BnwXRFeA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430724afbe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1025,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:31.447Z","timestamp":1785568291447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TobJ3DRWbmfN%2BCcDxq%2BzsjfoG0fgQ9VT8jMZuirGlys1hrNpbgC70lpXIx%2FQVWBXaO3OSb2RltyNz6N4IFQPhxPJSvwSRgrKnfDBgz0iNAa%2BMRg6sBQElFPa2tTtnO%2Fz%2Buc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243077d8d1a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~8d6e7d11.cd7469b9.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.981Z","timestamp":1785568272981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~8d6e7d11.cd7469b9.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"276bf4dd0075b433be672aa23fdfc4c3\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVA3I%2BUsAexACi5CjxhScWne0D2Ehjhpxb3VvvQX5xXHDTockdAaBT7zV0e6tGzcpAsWenNRjP3nPbCXvYo9KgM8TPZpEY8QqZ28vN3ueREqFUwX4UEEgnE8OhN6R%2FZk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a2d6949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229460,"size_decoded":71160,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"a834a826e3b552638dc3a6027f11cd05","sha1":"ea8e4dc11bfefd4ac45399509eff53c6aed62e48","sha256":"2d2c73f49decf82d6890b85d713f3fa96cef446379ac56b6bb2e4b316af3dbe6","sha512":"f8747de5247c3157fffbc02fbeffad0203beedd62cef46d2da4269b3e41c4c1fcfc778f57a202b9ba4364337e08d07e27c69d969da576b03793d8e6856a5aa9b","ssdeep":"3072:T5SPLpIurJOqrUFkr2nyKq5B4h9nOWpL3pBpnRYemkER:TkPLmEUqrUFXnTJXRYemkER","tlshash":"48242a3b4e0474492f3a07e7a0cabb1874cc5226db0b997b4ed4cf7421e16c55ac7ba9","first_seen":"2026-08-01T07:12:04.321238Z","last_seen":"2026-08-01T07:16:05.22884Z","times_seen":5,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.zrender~cd89f23c.7aaeec35.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.009Z","timestamp":1785568273009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.zrender~cd89f23c.7aaeec35.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"9ad7f483bbf500c1c7a52ac3fef8d85b\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXfYxvpGi5MvHuzNsuoO8VNFkeGDaLjq9vbZ6XJcQSIQtMQKHfU6a8%2F8ruCHBHqp9ORiXVPKFoQhfQ0HHBmjXLFj4%2B1xr%2F1TnF4mKaC23znczzTPrE0AIeSOe3ByMMZx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a5d7c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227325,"size_decoded":76477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60262)","md5":"7891eb581d3cd9c969cf55e65ffa1f78","sha1":"0514dfda8d2bdc80659f87340b47ced5b8c40dba","sha256":"7e4f8ccf0f08dee8ef51537ecf0a73878475561a6a32f342b66ba41a4f314615","sha512":"97abd96ea6204ec868bb662c4e2ed13c792c8c0a0708d82593d755813933431e0d2f5992e59cbc5b74be43a0f0978551741b0092d0699a26fee64d772e18201f","ssdeep":"3072:xs0+5xt73DAfGRBWV0nlKwG0A5DqsbxUL2q:C5xt7zAelz2ZI2q","tlshash":"7624e9e8b290b024434362e5843f150ff237255db50e89acf664e4ea6cbc44d667bf7a","first_seen":"2023-08-02T21:20:16Z","last_seen":"2026-08-01T07:16:05.222508Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~748942c6.7a7a5e18.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.060Z","timestamp":1785568275060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~748942c6.7a7a5e18.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"316309709b980f96319a15639a36ca89\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3%2FofPlAJn1ETU3VKe%2BFcfKEI0%2F49vSUy7EshZGON07P6P6V7NqeHV%2BbyZi0Iqb5N%2BsFGdXJjlpHPf8DBvTRpJVW9N1EWCqwO%2Bfs9sHHULlEtM%2F3uQEACd40%2BoXNUeJF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172e9e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121772,"size_decoded":25089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cb2dd59f6ae3b0de47cc1779354b6e85","sha1":"d59f444a686010f5e972dd1c96853581208a7d7b","sha256":"aa4c7d786fa963faa7cbca0b70500eaff63fba217d9a2d45f0841a3ba416742f","sha512":"c4383793e1168b4aa895bc917cbe9dc7be6aa74fc4c1a6e8b5d0893a9b34f337e93c4ddef4d188ea8986557ebd517aa1d987b58b082de7189bf2c2711fa33763","ssdeep":"1536:QsjXwazW+C+hp7BBuqOxCcrwllnB0D4qsrXm9JQ:XrLhp7rz4CcAnqD4qsrb","tlshash":"dbc36580b674b012879d3ea4092b608fe27dba3d6847007cf558d4f6bce9685692ef35","first_seen":"2024-10-16T16:49:24.914368Z","last_seen":"2026-08-01T07:16:05.211369Z","times_seen":1034,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~fdadd360.c8e567a3.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.067Z","timestamp":1785568275067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~fdadd360.c8e567a3.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"2c60ea0c75f2fecaae689438522f264e\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4QpmarV%2FAQD2173669H6xFX27MirrzZCTiejI1PBhT10PiOBqnA%2BQcgDLvMJBgVFlssoF53Vmz5flLo7CJ4480MUYO1hZRyS1E%2FsblM5MVthaywZQiKhthZCMR9Pj5w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307172ea449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499926,"size_decoded":116628,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64881)","md5":"13b73afcc6c58c0569469bb369bacba5","sha1":"201607571a6d34f42e938611a4adeccd9d37bc7f","sha256":"f979241a73a78fa0658e4ef82f785c59e3fa5cca68115483d394ea95eb4e9c46","sha512":"1a8c5d949e41a2d92eec6878a4b0b76769bdbcbdc437cb33bbada769a4b14729b45c616cb723b9bea5c65a291ead81a58d659c636325e05f8d9d46cb29922b43","ssdeep":"6144:B6ZEn/7zrmmdl8ZiTspVBtkwSVboLLLf8bm+0rdzS0hH:p/PwVBtnDIodP","tlshash":"3cb4f884f6a17052876a76b4083f500fe275b91d2847446cf278c8ea7dbc988797af3d","first_seen":"2024-06-07T16:43:57Z","last_seen":"2026-08-01T07:16:05.198173Z","times_seen":1061,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/about~defe45ab.844d2b43.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.070Z","timestamp":1785568275070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/about~defe45ab.844d2b43.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\netag: W/\"0e187b80270e882f99943361a0e6558f\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtxB9H9nTHT358sP9tBok8xD2wO6POiHMWFgz7e1p%2FAt0Op%2B2TyRpfcMpsdigJv9f5f56yt2U%2Bv0DHi5SPMAbjJa8dW8i%2FuI5jXMsdV5fOiUZDQ%2F0pvRzHIAfyWjhcsO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307173ea649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364619,"size_decoded":53090,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"61137f53c54bc55296d560235141185b","sha1":"2970448c319fbda930efd9286e7effa756ac6ee9","sha256":"e784f09cdcb9f79b3d40c8f883c0bcaf498e36ec653e59e5bf1123cf9a7f58ed","sha512":"150697ecb05bb5ee55a2d9d3e1283b055bc0c5156a700ea161f78acbfc618167ab93d2508443d2e536d1d5eebb3020f34a7c5ed24078cfb099a9dee1f762ae90","ssdeep":"6144:P/rZ8SqRrjSxhJF8gid5AuF3+iKXsTLaBgNCid5GmWcOwHrA:2BjxKcYw8","tlshash":"eb745405f197e279cebe5111201e0a30f1b27fe5d016c05ab278ca959ad8ea4671ffec","first_seen":"2026-08-01T07:12:04.324645Z","last_seen":"2026-08-01T07:16:05.232965Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/article/detail/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.428Z","timestamp":1785568275428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/basis/article/detail/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nContent-Length: 38\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"typeId\":2,\"pageNum\":0,\"pageSize\":10}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tzRB6xi2ipYisW4y9ZcoZFh1BA%2BiRiS3LjIYwyPbbvFd6Rjs1%2BRrq8OOz9jCAMOaXuSKv8yBwXhz%2BfHB%2Bed1YwUV48iPX71Bg9gFOuiI2BeDJojy1Aww2PoOVyEV5V%2FA5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243071c0e711a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20261,"size_decoded":7136,"mime_type":"application/json","magic":"JSON text data","md5":"e4fc447d1d2745cdb442fc69006db17a","sha1":"adcbe16d88f8e5639f8afad5287afedcc04c514d","sha256":"252852cdb04edcd916bd6f00605581091a801d2c0e1996b824d137e231ca7198","sha512":"9875c3f652bf1786775faa74c06623da1ae407ac12f83b8cf4617ec909bd926d49bc6d491f519f4107ae72bddb2dacf07c9474c1b0471db2ad9c158f8a701a94","ssdeep":"384:7faSVuc0mlencWiE9mNhqkt7au7dM7X5osBVk/foZO25qErbg:7aJcV6JiQmuktN7dCX5tk4O25tbg","tlshash":"4292d993015002b04ad10e19767faafe5b39a7c937805b8a0789e43cb4c6de8df79d96","first_seen":"2026-08-01T07:12:04.336229Z","last_seen":"2026-08-01T07:16:05.235289Z","times_seen":5,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~6ed3fd28.033eb874.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.978Z","timestamp":1785568272978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~6ed3fd28.033eb874.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"460bb8fed4c886fff69bb824170ae397\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ICoXCMY%2ByS57TeVRrdfxP0v6ZPBruqaaU2xs2ZZfaIIEH9JBxgDp9S49mHx3hU9CsS9kw1xWhQFS%2B3%2B7sHmVXrbZI8kRzCbEsDQMnRVzrYKdtXOi0%2Fvpiv1Q5NQr4JtC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a1d6749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510732,"size_decoded":128828,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"244e7817fd6b3d7b259496cd587a189c","sha1":"c660c0f9b76c281af69d2857b680d5254ed7b1a5","sha256":"ac62eee67a49e1149277c07e3c87c20959e1aaf942a38d5fc233c885fe636e4c","sha512":"472b2d8ca803efa9ef5dbbb5cc678e14a9fc6b71b2d99f02a81c8ba61f1f438f594b36e6bf0822a4cfffb17f7529c07d3ca0455b7b88db6c4458b5c4639a66f2","ssdeep":"6144:AlxzyO3JbILfSuDtwni7oUsUDfuOL8isIZfxW8:ATzyO3JbILfrmi8UvfvXW8","tlshash":"5cb41b8d72c5b9714ba36070103f250bb33b299ca40580dcb679d9ea5dbd909622ffbd","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.208873Z","times_seen":948,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20251201/0/386270096510681088.png","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:17.650Z","timestamp":1785568277650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20251201/0/386270096510681088.png HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 30201\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C15216B353339AE3AD0\r\nAccept-Ranges: bytes\r\nETag: \"D74BB9A8E0119574F0FB9A0F194DDA69\"\r\nLast-Modified: Mon, 01 Dec 2025 13:39:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 22405094436772304\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 10u5qOARlXTw+5oPGU3aaQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":30201,"size_decoded":30748,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d74bb9a8e0119574f0fb9a0f194dda69","sha1":"03cda2f498f9ed534cca0f83a0b6ff6de78d916f","sha256":"3286ef8a59b5ea1b277d04d993e9f065abc5191cef918a67dd5473ee7421d12a","sha512":"d1fd401ba4e893286c142c59a9da2ca5ce3e0745fd1d1b68fe87d4eeec2cbca35c4cfe7c20edd1e1047644d8e5e080f76bb7234571ccc2ad9b1a7df5e01e557e","ssdeep":"768:oA/Sfvq4VPb2SqzTNgQxZGl0T/AN28uommvtUfHS8O:oA/6/TNqzD3jLopt11","tlshash":"62d2e07beae9b4304a087554ecf622a306377daf9390bf131acf8c93894547b94a15c9","first_seen":"2026-04-28T01:22:39.370075Z","last_seen":"2026-08-01T07:16:05.203111Z","times_seen":6,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:32.448Z","timestamp":1785568292448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:32 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgy1w%2BWWU5CfJh75f5InYh4wPNnhwfPgoYqw7ws3%2FWkBHT8Pgj2%2BHqp55rLU5zr1h4xtFaQk7vF7CHFSJWOd6dzSLCyMR%2F1Fq4mMzNClWNOPIh0wihnueTBhCFgEUIgmCfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a2430783ce0a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1017,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/index.html","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T07:11:12.898Z","timestamp":1785568272898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/index.html HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\nserver-timing: cfExtPri\r\nlocation: /pc/\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cP5ljboPiJCN0wVTX5Dgd01iIvPpBa9QEF%2F90Rabqxbcy9a3MVjDULNFYvD3R1WGHnbfgF7x9%2FjMtjTeQaHemWgxz0lUpu8cB78i5RWP4zIEeB2AzbsD2KFsCJuGEzMW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a24307099d5549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T10:16:08.787829Z","times_seen":17651357,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/sort","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.430Z","timestamp":1785568275430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/quotes/sort HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nContent-Length: 33\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":33,"data":"{\"orderBy\":\"range\",\"isAsc\":false}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69QKojf58T65XKujsQ70ynIyZsvnnJKQVuBPlFIa2LIVNRjBDKw%2FknbtDPoYaGq7mdaiWxkx%2BMFdMI2LcBE1xVOUWTLwwXh2jjEO65kg4xNF378JkdKSQ623roDwmQk9Ogs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243071bfe6d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24461,"size_decoded":5178,"mime_type":"application/json","magic":"JSON text data","md5":"84d08f20afbf7589c8c000974d4fc352","sha1":"091ebaf6d104db3153dfc50e8cd4e4c05c1e51bd","sha256":"a7720707d62e0d6092fd1b86880f33c117db5eb4866dc04ae6dea3361479ab54","sha512":"2910dfe7184a07c303be65f18c4c1bcd5a2100bfdfaa14dd6efcfd0394d4674ecd13f365da58cbaa0abfcc66f14b566736d1da20836a45ae2b06a7242531d14a","ssdeep":"384:HTxaV5XCv7+esBXeTdA0R0u4vIrzHoLVjrzC33rJn/OtA/7mhSZXaBhQTQw+MH4S:HTxaV5XCv7+esBOTdA0R0u4vIrzHoLV+","tlshash":"4db2e390e362d71ba7f03d840e93de603fb6a18e1c8b0f75d18d6c15b5416a7368c9ab","first_seen":"2026-08-01T07:12:04.338935Z","last_seen":"2026-08-01T07:12:47.834802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~06837ae4.30803a98.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.968Z","timestamp":1785568272968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~06837ae4.30803a98.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"18fc6fd3c697d8e1445103a38684470a\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TEJE44MzVMuimhlG%2Bfuii9LwKIOnjbfp%2FLy32CpuEhxi3wp%2B0W%2B%2BCGSz2ZJQRr2J8KtHDcu91ETPfjAd%2FB6kmQn0cDO%2BRJIWpBDeujbjvceATGMHHbRqWGmqkdHDMR6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a0d6249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":894683,"size_decoded":570088,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a3ebc36045ed1baa80f3d6b5c2cc1a1b","sha1":"f2e681218add65a83d924bf4a1f3304d21e888ef","sha256":"caaa2969d675b8297fa37f62b4fec16696ea3c7a8f41c848225ae68329eb3628","sha512":"08a87ddca64363f55bbe2aff4460db92c07714588e02e9a4eddbdc4fac1e77f15989ed3191cbe906455d20e48f6b8246487081596ebe5823fc7bdc0d84db903e","ssdeep":"12288:fCF43yIQaxLCN9Bw7fgBKAoLRAREL4XelMYva90uhH+VeV4ejpTaiPc6XDI7:fLiZaIBwfl9ZL4X6MPt+oS8Y4D0","tlshash":"7d15f13e30977d588db58a74b01b99196ca31c9be45c8042a77c9fd1eddeb24230f8ad","first_seen":"2026-08-01T07:12:04.339807Z","last_seen":"2026-08-01T07:16:05.217075Z","times_seen":5,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~2119ef82.8272bc6e.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.997Z","timestamp":1785568272997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.echarts~2119ef82.8272bc6e.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"9ad11c59cee39cee4d561a00695e65e4\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fTGNRvwS1shD9Rkd%2FxTDhOCspH3gOtWv4v8vQR896YtKqPdZ8sj7yVtuSS%2F%2Fo8L%2BjKYuBH6q0KvYpFIITHbFDOELbmNef5jirCxYGNxtlk8JLOk%2BV3v2CJrm7mW6Z2U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a3d7349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251309,"size_decoded":81743,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"9b83d509b9a933950e3fd4cb3c303ef9","sha1":"0857287654e670e0458c79b830629d6d97374d55","sha256":"49dd978f85b4a30f2a35da82bb7e297ac977ba0b28ebcefd92fda31ed5931f00","sha512":"3f32bc225fdcea33af312c7db14c2e4475c7228d6146b5bce95f6f78f02364d99a94e3b229e5dfca93eb6124ec8ca498af31e9e0762f15bc3d673ee1f33c9c12","ssdeep":"3072:7CZ/04zPlQdTc9RXhYYHTfyEtqzHQl8azc5PCMO2:7s/0zAjXhLfyEt0QCPxO2","tlshash":"1f34f89c7644f02152a332a5446f140b9236681db50fd938be56d8daa8fd48b333bf7a","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.226234Z","times_seen":1006,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/chart-loading-animation.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.044Z","timestamp":1785568273044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/chart-loading-animation.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f90141f68a1c4987b7eb74f22a3e3282\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByXfHRIMu0NMvQoo%2BLCaVBUETCTrjgj0XShTVGcKI56LWBQJJYYOyKDaB5QtabniqArMyc6NETod7UAtZGFXgzG92JQg2yrkp9jzVaqpnX2BFBoqBHUCNKHYrOyhybIz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a243070a8d7f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127875\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127875,"size_decoded":128526,"mime_type":"image/png","magic":"PNG image data, 375 x 375, 8-bit/color RGB, non-interlaced","md5":"3da61bd2cf4e41e5201aa5fc56c209f7","sha1":"e7458e9f42fbf822e042ddc9d30900989cccd2cd","sha256":"9a1cb77f234caa4c22c4483ff34cf7f171f091b6181c0ca7b758128570317ba5","sha512":"314e9518fe8b99c6be4b7cc435a0bd9d69a5abd3562080553efbb7c1dd261985b24a788b41ad23d4e41316cd4273712e5d911f633e0e108d7be24ba4b1840096","ssdeep":"3072:COKx+KxAqfPR0JMWgY1A8MuTtYPhej5rlo:CR8lMlYa++ZeHo","tlshash":"94c3129ecc946f4966dbbde513fe3c3ca0d7818cda77652401bea35c7a2419b0290353","first_seen":"2024-12-29T23:33:15.137814Z","last_seen":"2026-08-01T07:16:05.215472Z","times_seen":222,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:19.244Z","timestamp":1785568279244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:19 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K10LBNRrKr2%2Bz9dIhCWil1IwOmpFtmo8fO%2F1lQDoN0XaEheD%2B%2FboH7ladncFarMBD%2BuaAmBORGVPeeWuuXQTnlqT7nIDXNpKCzwxO3czmuaH5wgWE5pU6tKuEnUBzy38yQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243073149cf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1019,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:28.443Z","timestamp":1785568288443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:28 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yus2YRECuY%2FQUhTQXucrgHWUHM6XeVJj8utpBSr0U2YYHOZ0YpJcw%2FjW8LdbCS4dbqdew5%2FruvVNvJyUE%2Bdcwuf23dfyxp1dssxlXuv%2B27ZB%2BlDlhbwAe%2BOBQvsuP10EqcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243076aca7c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1023,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.316Z","timestamp":1785568276316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2780\r\nage: 10061\r\nlast-modified: Tue, 19 Oct 2021 05:32:40 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 01 Aug 2026 04:23:35 GMT\r\ncache-control: max-age=86400\r\netag: \"856bfdb63dc0d6fad6b92fc6a29719e1\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 42f63300fbd68ad2da1e182d0d6d6948.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _pr5CLIjG-lqNTQqTFvsq_JD2gZLekLf1q7nCUM839fU7D__lkKA3Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2780,"size_decoded":3306,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-01T08:39:11.098803Z","times_seen":23018,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":51,"connect":13,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/npm.echarts~4939e289.0e53b72a.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:13.003Z","timestamp":1785568273003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/npm.echarts~4939e289.0e53b72a.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:13 GMT\r\netag: W/\"2716fd24b85ba4bd3425171ef69d68d5\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlNHyowvsFtUMi0xk42inPIGX5ZJnD95D%2B3BELN7iB5SSRxDnbMdMmkrqrior1v%2F6fkJjDEQbQK%2FJko%2F2zzVGHrhZtn2LBlnOjf2uL7T3o%2B1r5TJ%2FpAXAYeeYh3b045c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a4d7649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181585,"size_decoded":58058,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"49f2bfa4f3365791daed86ec1b1250b6","sha1":"0be8a624d8d2a7aa2d89cbad874d09c4c6c70936","sha256":"1fbfe8273d716c390f2daceba96ad260779c8b64eb54a17b79e8fb30cf06e37f","sha512":"5a16e3f1131371a761fc2fce9bc26f014f887e8fbf608b4962d0bbadaf7feb34eea8b7a332c7a77733fe73331a53721a164ff3660d0473f09b7fb0284645ca55","ssdeep":"1536:IXwfpNcLDQeaoKMKFpw91Gbb1+4FDtHCUdm+Qc3DWqsi72:tfpiQeaa91GbImNQQWKi","tlshash":"0104a398f695f065439731a0467f050fe33a685db40a85acfa90c4da6cbd44e323bf7a","first_seen":"2023-03-08T22:49:45Z","last_seen":"2026-08-01T07:16:05.19773Z","times_seen":1026,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/article/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.433Z","timestamp":1785568275433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"POST /api/app/basis/article/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\nSET-LANGUAGE: ENGLISH\r\nAPP-VERSION: P2.9.3\r\nAPP-CLIENT-TIMEZONE: +8\r\nREQUEST-DOMAIN: https://gxmcoinwb.com/pc/#/\r\nAPP-ANALOG: false\r\nset-aws: true\r\nAPP-LOGIN-TOKEN: \r\nContent-Length: 38\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"typeId\":6,\"pageNum\":0,\"pageSize\":10}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2LMINvyndY73AfO77CjoiMUHfgv3hDNCvcaTlCSzqNLKqHYVB4X01HbPIW9GYy1UFFFL%2FKy64ji%2BKztn65F67z2Xdehnv%2BBubQULYGbSA8GhbGf12ZvPzDy8wuWa8zl6uA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a243071bee6b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":847,"mime_type":"application/json","magic":"JSON text data","md5":"92dd2cb891fbf8e4142bb959560ab7b6","sha1":"6124e6a916b6dafa04640cedd168628c518b049d","sha256":"ae41ee61ab3e5d15f990557e9c694285b169ac4a79d62bce8026c1621fb60c9d","sha512":"1c40b3c820798ab765c4be371ae117d4cc63ab28843731fdff8768f63463f3e2bff5cd3d09ab13c144e2070e4ed3be529d1f6e806f1fce13c90fe1217ef4b13f","ssdeep":"","tlshash":"c7a002c058ec00704f804384101f192109bda4d71d2905005768de2252f00717624726","first_seen":"2025-04-08T11:33:28.487624Z","last_seen":"2026-08-01T07:16:05.235973Z","times_seen":201,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/basis/slide","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.452Z","timestamp":1785568275452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/basis/slide HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99Ri%2B6GdHUNuaUay8pB%2Bpctln9%2BFPfRUkXB4W4AYBg3lSff83TWudiABeb5hIYWgA1lp%2Fpel4ZBxX8Msb3Exf2R%2BUMPbdWaaaYRVRJ%2FyCJ2%2BX%2Bl%2B%2FVykU8qWeETCYVSFN04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a24307199e2b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1029,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:36.454Z","timestamp":1785568296454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:36 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DyMO%2FNtJ94LK6Wducg3vZmL4dqWAjkB%2BBlaqvO1shiBic7I8o056%2BIUuRn1R0T0xlCF7UPOyo2SIn41kOT%2FwPPftbtu022PPk%2FFyDngSFXNXQYZcMIgDy5ES2yxFQVHieY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243079cd8fc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1019,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/fonts/iconfont.b81c9f91.woff2","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.385Z","timestamp":1785568275385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/fonts/iconfont.b81c9f91.woff2 HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/pcstatic/css/app~06837ae4.e08ad622.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"59b16239abd6d3529e30d5ae626d320b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoF9zcFk9U6PQvncAh6J130rs%2FA8ZdLo9gxWXcPdzFHKWVmQ6YBZHfrPNw5rR40JmTJkV1LpXWscLtOJTmra952gZmxQ1HtIvktDhHOZ3DaOd%2BEcn87GsMcElYRqTmYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a24307192ee049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7584,"size_decoded":8239,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7584, version 1.0","md5":"b81c9f914a2a6ff52bf6524037715608","sha1":"473a31f4143e5bf87cf1634de4209edb908cacdf","sha256":"4ffbffe49d7d1ad61c72be3206275136b5541e503c1f509cf846212d4dc5336a","sha512":"520013ab2bebc2a87535ebfabb257c4a49278aca992a1524e97c17dab71966e0e62bd0ee946b8e117d00c50e5e7a5df9df8af990bc9e76f18a44397e5ae5f50a","ssdeep":"192:D3c0Xtid7wY/i+mld6wlnul2zLQRSbkubMvXibvUaRvA:Lc0daMYoiwlul2zLQRAbcXibv/RvA","tlshash":"58f18e04cdfa44b1cee16d63b61fc5d8e14309f6b5574dcc8200afec8ac976ab215529","first_seen":"2023-04-08T17:23:24Z","last_seen":"2026-08-01T07:16:05.197259Z","times_seen":1033,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20260508/0/443273618292977664.jpg","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.337Z","timestamp":1785568276337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20260508/0/443273618292977664.jpg HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 72173\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C15E173EA3035213BA0\r\nAccept-Ranges: bytes\r\nETag: \"43073D80D6B15C0EED2F431C1481B8FD\"\r\nLast-Modified: Thu, 07 May 2026 20:51:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7505003530416653996\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Qwc9gNaxXA7tL0McFIG4/Q==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":72173,"size_decoded":72722,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 847x565, components 3","md5":"43073d80d6b15c0eed2f431c1481b8fd","sha1":"1ce6e63251920924fe7435ac431b79a9cc25f975","sha256":"697acfc575a666f833bc4159084a15372d226d8aa1ca67afff0841bb05043ac2","sha512":"97071d55e8174e8ad8762ee87efefc2804ba0ccc34f4d04dca6723623d1927dc81923c32a51a75dfadd97206424ceec091c01e455de90b998e3109110abe56f4","ssdeep":"1536:FUh3K6N4kk3Fgl504ke9P/a+z5PN7ew7dLUMK7WBNCfbAdn:F0N4XFd5a/aqv7t7dHSAB","tlshash":"006302c83e2a871793d823b9b97c05b77015d8de735bf01eb2617b7a64adc020c51aa3","first_seen":"2026-08-01T07:12:04.345126Z","last_seen":"2026-08-01T07:16:05.2083Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":839,"dns":0,"connect":0,"send":0,"wait":179,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.coinmarketcap.com/static-gravity/image/79ada5fd9cb048f799ed40d4d24c1f92.png","fqdn":"s3.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.319Z","timestamp":1785568276319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 11 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1B:1B:E4:D0:1B:69:1C:B6:DC:35:3C:55:50:29:1B:F8:E4:2B:AD:4B","sha256":"26:57:04:89:BF:67:93:5F:2F:DA:08:E3:A7:D4:28:B9:66:FF:8A:42:3D:02:44:5B:F6:B5:BE:14:C2:19:54:95"}}},"request":{"raw":"GET /static-gravity/image/79ada5fd9cb048f799ed40d4d24c1f92.png HTTP/1.1\r\nHost: s3.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2330\r\nx-amz-cf-pop: ARN52-P1\r\nlast-modified: Fri, 12 May 2023 03:11:29 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 01 Aug 2026 07:11:16 GMT\r\netag: \"39edd8e5c80256300562f68afb1ab525\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nage: 262\r\nvia: 1.1 1abd987c61e5ddaeca88770eced438a0.cloudfront.net (CloudFront)\r\nx-amz-cf-id: 8w85ZkAKT58R8qMPnb9HmiUacBcxrG2SRFfL7-l1KzU_OeGLFi_MIg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2330,"size_decoded":2832,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-08-01T07:16:05.227714Z","times_seen":17615,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":23,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20260702/0/463279733565075456.jpg","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.334Z","timestamp":1785568276334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20260702/0/463279733565075456.jpg HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 21706\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C14E173EA30355B39A0\r\nAccept-Ranges: bytes\r\nETag: \"E5D019821D747094974F8FE8CDDB889F\"\r\nLast-Modified: Thu, 02 Jul 2026 01:48:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11038963949441540204\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5dAZgh10cJSXT4/ozduInw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21706,"size_decoded":22256,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 728x485, components 3","md5":"e5d019821d747094974f8fe8cddb889f","sha1":"834afcf6146718285f79a0f91ff198955b8e9cd1","sha256":"8ef0774bda69440d8b0ece8590efc69422cbf32bd43275b6e24e2e09567a6fad","sha512":"02265706dc34215dd002021da20dffc42a808181481cc621c5c310331a405a3f4da052ab09e534df0172c0dd9f1198356fbf6c24d16d645579279485b15d739f","ssdeep":"384:4+ozS/ShYSci/QnyU55DukYDAkrGu3II0RcK9xS2lgVi0:BKS/KGi/Qy+DZJvI039xLlgo0","tlshash":"b8a2e1b063f38a69e858d335f5d01276f3a879817a50ff3f0744118e1eebe845840966","first_seen":"2026-08-01T07:12:04.346566Z","last_seen":"2026-08-01T07:16:05.22016Z","times_seen":5,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":301,"dns":0,"connect":0,"send":0,"wait":179,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T07:11:12.650Z","timestamp":1785568272650,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"99fa6cef890e6f79495e6f5424a037a0\"\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLOZQzyhKiSouDJdD9uJQwFF8TXsCY6f%2FU9wV2s1YYsxperaoWAsPBZBvCgUf1K9Zj6NB4crNQoT94udkgiZHWjnmYvtfQQEh%2Bf9OnDPqXQt8JeWAWSz3OH4eoXfe8SD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a24307083d4249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T10:16:08.787829Z","times_seen":17651357,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/js/app~52d661f0.1565e832.js","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:12.971Z","timestamp":1785568272971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/js/app~52d661f0.1565e832.js HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:12 GMT\r\netag: W/\"042d179acd1ae1fdd4ab22fe8534788d\"\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjXeJk4SOnP852XAswc%2Fm3MbCvvUI7U6VmrqTApDEILfqz360%2BUgEbSv7eZh8vYs59D97p4CulajCxPn7BcRiYQou5qPrfciz7%2Fl3K65LpMpYaj5cXEUnZEkz%2FezcMSd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a243070a1d6449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577193,"size_decoded":139954,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25366), with no line terminators","md5":"ad06634a5668ddfb04e6f7ef203550fa","sha1":"e9283a12fab78c7a1f866481bda98cd7fb286cc1","sha256":"09af75a02ccc35d896d2ece524d13dbba68889d8c7c22f349d15473aa699bf4c","sha512":"2935ee16b2f22259bcdaceacbbecbda949cbd37b35f305e7bd74a0f694cadaecd0ff4db9e0d4ec61c2e98c4f0114ef45d123e7eec8de1640bae50d3b83c9132c","ssdeep":"12288:F6cDp0FCv1AFkh4zCZFIrRblK8sfpVl6adlNrN5QzJGvMP6W5DVe1BqkkPOI8LoD:mID2m0sYpjihi6p+3V6hoVAsAb6z75HD","tlshash":"24c47673568a98dc3105aa0b99187b4974ae99bd3f73f9e000d4286e32f1b19c135fe7","first_seen":"2026-08-01T07:12:04.347531Z","last_seen":"2026-08-01T07:16:05.203631Z","times_seen":5,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hellobit24.oss-ap-southeast-1.aliyuncs.com/default/52946924084400128/20250613/0/324065431285755904.png","fqdn":"hellobit24.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.247","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:16.068Z","timestamp":1785568276068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /default/52946924084400128/20250613/0/324065431285755904.png HTTP/1.1\r\nHost: hellobit24.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sat, 01 Aug 2026 07:11:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 261151\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6D9C147DEE3B3633485B92\r\nAccept-Ranges: bytes\r\nETag: \"889C4BD98116CE95563048037457713F\"\r\nLast-Modified: Thu, 12 Jun 2025 22:00:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2031124618104771069\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: iJxL2YEWzpVWMEgDdFdxPw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":261151,"size_decoded":261701,"mime_type":"image/png","magic":"PNG image data, 624 x 346, 8-bit/color RGBA, non-interlaced","md5":"889c4bd98116ce95563048037457713f","sha1":"a6589232a680b0afd3553b91a138fbfe5e49375a","sha256":"d3bcf0235da4853fb61ec7b6b18b3e045833c9207e314846356a81bac26c61b1","sha512":"f707410c17d010e2751a78331071d30d762a1889ee43a2ca8a0b0cd0a7a015db2b37ad217627bb5ae4bd1ff38b99ed43f73040a57d2825ac63dcb7115188c19f","ssdeep":"6144:dWy4FZNvI0Le1j8P0UB09g/QCIMBQ/yo+Vy2X7uPC3:L6g0qFmQCIv/8+C3","tlshash":"d64423a4d94817266cd6af52583b8758fa3dbf892d9b0c7cc3055f34007dae0d8968af","first_seen":"2025-06-19T09:56:57.609601Z","last_seen":"2026-08-01T07:16:05.193475Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":175,"send":0,"wait":180,"receive":438,"ssl":353},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"hellobit24.oss-ap-southeast-1.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:21.356Z","timestamp":1785568281356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OE7W88geT8AfnqBf7ogVfjKQrLsPxYbrWAF7r70qqfDCe%2BHnWZNRfusRXbWwfQzr6%2B%2BjomCZk%2BA6yN1a397g1YJgd%2FxBmm4JZlq9dAnUxXJQwSF%2FgQHaa0qnjNEJIJor0s0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243073e7bcf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1021,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gxmcoima.com/api/app/quotes/get/new/list","fqdn":"api.gxmcoima.com","domain":"gxmcoima.com","tld":"com"},"ip":{"addr":"172.67.219.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:26.439Z","timestamp":1785568286439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gxmcoima.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:02:48 GMT","end":"Wed, 28 Oct 2026 08:02:46 GMT"},"fingerprint":{"sha1":"32:56:BB:C1:E0:E3:32:90:A5:17:3B:D0:AF:38:29:85:1C:99:18:2D","sha256":"CA:DD:B3:12:AB:F5:B1:33:96:A3:B4:46:71:7A:2B:70:A9:8B:F7:2F:B7:51:0F:45:02:D3:63:D7:B5:6C:A4:10"}}},"request":{"raw":"OPTIONS /api/app/quotes/get/new/list HTTP/1.1\r\nHost: api.gxmcoima.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\nReferer: https://gxmcoinwb.com/\r\nOrigin: https://gxmcoinwb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:26 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1eVPdCyyLJ8LwkHSlIffOvCSrVn2nQ0BCdqdQOnffV5X%2BnanQ5o1KLa4pVzWdNVdnv%2FJpV1upo%2BbQSTIaR75eiBa%2FbG0QWD6f8dCrAf6RO4mAjK%2FVwTSAAt27NscgJlePA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://gxmcoinwb.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-client-timezone,app-login-token,app-version,aws-check,content-type,request-domain,set-aws,set-language,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a243075e48d91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1019,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-08-01T07:16:05.195195Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gxmcoinwb.com/pc/pcstatic/img/start_trade.aead4ceb.png","fqdn":"gxmcoinwb.com","domain":"gxmcoinwb.com","tld":"com"},"ip":{"addr":"172.67.194.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gxmcoinwb.com/pc/","date":"2026-08-01T07:11:15.329Z","timestamp":1785568275329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxmcoinwb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 17:31:50 GMT","end":"Tue, 22 Sep 2026 18:31:46 GMT"},"fingerprint":{"sha1":"D5:0A:AF:CF:18:96:39:CC:C0:A1:92:86:8A:4F:9C:2E:2C:60:B9:FA","sha256":"D6:B9:A3:43:6A:1D:59:14:20:4C:85:6E:F2:C4:DA:EE:CC:29:81:D8:D3:09:72:39:FC:C5:48:2D:4C:D9:AE:3D"}}},"request":{"raw":"GET /pc/pcstatic/img/start_trade.aead4ceb.png HTTP/1.1\r\nHost: gxmcoinwb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gxmcoinwb.com/pc/pcstatic/css/about~d44a7288.75e2c088.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 07:11:15 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f5299799e0d81f413b23c6b76a5ce60\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeKPnRYSWe3rrnkYK3f35hCQA19nT7rb6uyqNBkLkAtaC0O%2BaUzy2Sl%2FbkI0t%2F272kIgKF%2BeZ3RzwCZh0Y9UmTBEVnl8o5r6j4EzobkGJmz6qwmv5%2FDw8yslm4qQ6I1B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2430718ded849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 196379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196379,"size_decoded":197038,"mime_type":"image/png","magic":"PNG image data, 1920 x 580, 8-bit/color RGB, non-interlaced","md5":"aead4ceb800ffe4c22b2b0cbd09e2bd0","sha1":"784f89a8d8d8f034f7213e4206557b3073586b3d","sha256":"140cc6a94297450789e8fe645e3e47e032ad3a91fc45f9d3c5e080de0ce16620","sha512":"e1ab3f828734f9b52b8da5ca89ca5e35ca0f70cd95f9208e641e6492d4b20dba75a6a7cbd66ab09054ea654fe3742d1b20716f6ea4223815834e43f43244278f","ssdeep":"3072:l5GnpkDQlxo6Kb/50P8leBZ1DC7tVGYA8tj4nlcIuc3rcMQf1FeIGcW71:l5RDME5tFtVpTj+mu3rbAXo1","tlshash":"8c140222313b5f81cbd907fc13d219d390c8c9e4dc06e96a7a76c56ff865387aa4588d","first_seen":"2024-12-29T23:33:15.175951Z","last_seen":"2026-08-01T07:16:05.192673Z","times_seen":194,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"gxmcoinwb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}