{"report_id":"aaef8918-e67a-4b08-8a55-8af8dd666146","version":0,"status":"done","tags":[],"date":"2026-07-20T11:29:44Z","url":{"schema":"http","addr":"ex-faucet.xyz","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":0,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"title":"PEPE Zone | Crypto Zone","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ex-faucet.xyz","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":0,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T11:29:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"coinvaganza.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"mixtoshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"ex-faucet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"ex-faucet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"4.adsco.re","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2026-07-16T10:40:21.192165Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":817,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bid.onclcktg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-11-28","domain_rank":350689,"first_seen":"2024-02-11T04:01:24Z","last_seen":"2026-07-10T15:30:03.157921Z","alert_count":0,"request_count":1,"received_data":2855,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"3rdparty-apis.coinmarketcap.com","ip":{"addr":"65.9.46.115","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":3258633,"first_seen":"2020-09-29T03:34:53Z","last_seen":"2026-07-12T20:37:03.563556Z","alert_count":0,"request_count":1,"received_data":10796,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"js.onclckmn.com","ip":{"addr":"92.246.95.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-12-13","domain_rank":342528,"first_seen":"2023-12-28T01:05:45Z","last_seen":"2026-07-10T15:30:03.979829Z","alert_count":0,"request_count":1,"received_data":136490,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cs.eu.cckmnd.com","ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-03-06T20:39:34.91724Z","last_seen":"2026-07-15T22:48:59.153016Z","alert_count":0,"request_count":1,"received_data":796,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-07-20T08:28:52.267165Z","alert_count":0,"request_count":2,"received_data":5483,"sent_data":1359,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fpjwni0houlc.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":156,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"onclckinp.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-28","domain_rank":20672,"first_seen":"2024-01-03T15:28:46Z","last_seen":"2026-07-20T06:22:11.660362Z","alert_count":0,"request_count":2,"received_data":685,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"files.coinmarketcap.com","ip":{"addr":"52.84.50.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":4262692,"first_seen":"2015-09-03T05:46:35Z","last_seen":"2026-07-09T07:06:18.134163Z","alert_count":0,"request_count":1,"received_data":59460,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ex-faucet.xyz","ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"domain_registered":"2025-10-14","domain_rank":0,"first_seen":"2026-04-28T17:00:50.493093Z","last_seen":"2026-06-17T15:26:50.716828Z","alert_count":4,"request_count":2,"received_data":109794,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"klmmnd.com","ip":{"addr":"169.150.247.35","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2024-06-03","domain_rank":361571,"first_seen":"2024-06-11T21:19:32Z","last_seen":"2026-07-16T06:18:03.72763Z","alert_count":0,"request_count":3,"received_data":2103,"sent_data":1485,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"js.onclckbnr.com","ip":{"addr":"92.246.95.231","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-12-13","domain_rank":384217,"first_seen":"2023-12-18T10:32:24Z","last_seen":"2026-07-12T19:55:23.043238Z","alert_count":0,"request_count":1,"received_data":85626,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.onclckpop.com","ip":{"addr":"94.130.197.240","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-28","domain_rank":2009835,"first_seen":"2023-12-14T13:20:35Z","last_seen":"2026-07-12T13:11:51.880393Z","alert_count":0,"request_count":1,"received_data":11605,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"coinvaganza.xyz","ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2025-08-04T04:41:55.276094Z","last_seen":"2026-06-17T15:26:51.422887Z","alert_count":1,"request_count":1,"received_data":13608,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"mixtoshi.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-12-06","domain_rank":0,"first_seen":"2026-04-28T17:00:50.483711Z","last_seen":"2026-06-17T15:26:51.788835Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":1062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":4,"received_data":531475,"sent_data":2174,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2026-07-16T10:40:21.328814Z","alert_count":0,"request_count":3,"received_data":2510,"sent_data":1364,"comment":"","tags":null,"fingerprints":null},{"fqdn":"onclckmetrics.com","ip":{"addr":"138.201.236.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-12-21","domain_rank":18509,"first_seen":"2023-12-26T11:04:13Z","last_seen":"2026-07-10T15:30:02.768993Z","alert_count":0,"request_count":1,"received_data":313,"sent_data":839,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adbytes.media","ip":{"addr":"104.21.86.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-24","domain_rank":1823667,"first_seen":"2024-02-24T03:05:21Z","last_seen":"2026-06-17T15:26:49.910113Z","alert_count":0,"request_count":1,"received_data":24818,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.onclckpp.com","ip":{"addr":"92.246.95.231","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-12-13","domain_rank":4285028,"first_seen":"2024-05-24T06:26:37Z","last_seen":"2026-06-27T05:47:08.233715Z","alert_count":0,"request_count":1,"received_data":107801,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fpjwni0houlc.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":156,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"niataregister.org","ip":{"addr":"159.198.74.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2026-02-04T02:52:04.541876Z","last_seen":"2026-07-11T00:49:47.500853Z","alert_count":0,"request_count":1,"received_data":874,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"ss.mrmnd.com","ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-05-23","domain_rank":1828856,"first_seen":"2024-06-12T23:06:24Z","last_seen":"2026-07-19T11:05:55.446604Z","alert_count":0,"request_count":1,"received_data":13428,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2026-07-18T10:50:43.49358Z","alert_count":0,"request_count":1,"received_data":99244,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-19T22:31:15.74052Z","alert_count":0,"request_count":1,"received_data":487634,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"excoinbit.online","ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-27","domain_rank":6680834,"first_seen":"2025-08-03T23:19:58.339237Z","last_seen":"2026-06-17T15:26:49.909832Z","alert_count":9,"request_count":9,"received_data":436716,"sent_data":4889,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-07-20T01:44:57.513425Z","alert_count":0,"request_count":10,"received_data":18366,"sent_data":5622,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.blockadsnot.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":502145,"first_seen":"2020-04-18T18:59:38Z","last_seen":"2026-07-14T18:46:39.011351Z","alert_count":0,"request_count":1,"received_data":42923,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"zerads.com","ip":{"addr":"162.0.208.108","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2021-12-17","domain_rank":68941,"first_seen":"2021-12-23T05:44:08Z","last_seen":"2026-07-12T01:21:58.559075Z","alert_count":0,"request_count":1,"received_data":3251,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"blockadsnot.com","ip":{"addr":"208.95.112.254","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":54363,"first_seen":"2020-04-28T15:35:52Z","last_seen":"2026-07-15T18:52:29.788836Z","alert_count":0,"request_count":1,"received_data":258,"sent_data":1782,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2026-07-16T08:01:15.25473Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":817,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nereserv.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2026-07-18T23:30:18.466914Z","alert_count":4,"request_count":2,"received_data":640,"sent_data":1132,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fpjwni0houlc.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":156,"sent_data":475,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ex-faucet.xyz/04add9dc-4d1f-426f-a94b-1f512ea4f0eb","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"511b89bfaee44251cc5d11e09bd852ee","sha1":"8dd00af3af656c336b8cba64ca9812365000486c","sha256":"dba78c33f40964828161bff1db630142bc93f1df58767176cd8683eba4e3fbc2","sha512":"774c9949d1e63f46ec436d7c8ef0a78a52194e1f2b606b41aac9623aab977ae78f6d089194d908a6c7d103c6db220e129bfca7ab726891225a0a8be8e9aaf140","ssdeep":"","tlshash":"1bd0220f032b0c2f132210ceb61bb0828c2010220208381efbcc26530f89800186cba8","size":214,"data":"","first_seen":"2026-06-07T09:23:54.558165Z","last_seen":"2026-07-21T11:44:10.465154Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6869e570bbc1793d11f4519ca1363634","sha1":"355497054687450b1222004137f8046384bcd36c","sha256":"725ba965568831a01b475b74c359ff88ae0a4825c2850078b024a031356fbc0f","sha512":"ff4d0086bcfd3efc5507b0937e5bb8f31ddc4e66d07ae8d5c19d6d188381da375fd91ee0b615aaea4d916171c578bbcd35b4394fdd1b2e021d7e2f63aa5f3fb8","ssdeep":"1536:YK7iVMXr2hzVk/T+OmP4nlySHPoLWhmytPtd3xQhtwdR1bVGAHgae5im3oaHh4f0:v7XXr2hOaOmQnlySHkGzRtGBae5im3ZH","tlshash":"44a37cb6b621703912f220f9167f2306b1b60b216c598491a376dae43c75ddb833ff99","size":98274,"data":"","first_seen":"2026-05-27T20:04:06.956182Z","last_seen":"2026-07-21T20:31:58.112419Z","times_seen":1763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"11a2ec869431a2a614e01797b86537c3","sha1":"2e8591f96082073834259798c9eb587b25b8f0d5","sha256":"a05d4dd87f49afe0768dc8647a6fe4a99b0f6757aa41e052cdef113bf1eb84c0","sha512":"bcaae7ba7b1bd2b55b6189933e91cef642eba7ed95099404a560bd559d1615bc49b2f9f0b88fa94ae3dec056bb791308aaf4df93427441e1e61031212e113ef6","ssdeep":"","tlshash":"53a002bf3193f0114a157715413f9745f1be19904e5d0490d0645764395d826c7ae4f9","size":66,"data":"","first_seen":"2026-04-01T19:11:59.865865Z","last_seen":"2026-07-21T20:31:58.185288Z","times_seen":3341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7655475990e7d9a5d6d25e6af8d29dd1","sha1":"e14a3bc3b15f51579c6a682bb6f1516a95544037","sha256":"1d29f809de0beef389a2ba0947883e7d410d0c3bc37d4f0170305f1f88e9e99d","sha512":"47f243326ae84f85b1c24955ef1912cf38ed5f200c5227e2a2db42f9d547a66e6fef497df02abd9f5aeb644904113b49360ab0ca1e5d88659f65242ab6ec4c6b","ssdeep":"","tlshash":"2da011ab3082a0000b0e2002803b8300f0ba08a08a8c082082000a3038ec82ac3a80a8","size":78,"data":"","first_seen":"2026-04-01T22:14:46.525033Z","last_seen":"2026-07-21T20:31:58.161849Z","times_seen":2968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8626e95f756d3cdfea9c11398112d75e","sha1":"5d828929bfc3a58c2a3693e52fafcd7c6f188a0b","sha256":"e9d29797c92d53051566f385a9a28f14c638b865cf3d5795a9314fabbd3d9468","sha512":"9f65615a52df61dbef34764bc646d31beb6ec24d2c8e822d6d2d77a293685eb6c8b5f68c7e0b029cba7145581d14b712cf9835ba53eb6d3e1e9dc2a7846a46a6","ssdeep":"","tlshash":"fcb012bf70e5750053213514017f135df5bd0ec20ecd1c2060104284b8ed627c2f4878","size":103,"data":"","first_seen":"2026-04-02T06:30:29.537695Z","last_seen":"2026-07-21T20:31:58.18213Z","times_seen":2807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9404bc09b9767c62950316ac56f2d3e0","sha1":"79b6f59145be1f3f44bc7b455da1a79b17dc1626","sha256":"c76f0589a2815829ab21dc7888fb7103a0aebbe6a566314ae5e1c369fe363414","sha512":"a50bf35011f30f8448cffe916fdee09ed413c217fcb09c0e65c43ddb91e2e430eda183d7264dc6fefc554e948b60e95fb803df577b6cf11757f5326ca48575be","ssdeep":"","tlshash":"7ac02bcc225b1c7055e727008f3ffa00b001325894d1a931081923044d20f03d744830","size":149,"data":"","first_seen":"2026-06-17T15:26:59.110695Z","last_seen":"2026-07-20T11:34:12.09077Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6566e2988cb56e6880f85166c71bb610","sha1":"58313cf0aea652d7ebbe86e3100caa8b0aefc0d3","sha256":"a28564179a0eb2c29fe9e9a0414779a0d2e20302042579578b54c2336764e11f","sha512":"0f5f523a7e56210d1537fe1cf4ef93ff7bb011b948509d5f087b1d288820ae15ce5237de843444eac3c85d5cc212b6e8c363ede4271dddd7e880d22736650dd9","ssdeep":"","tlshash":"da1154547d15b16a62c259b880bbd40068f211aa4f08a5d9e8ffc0e027758c65c15eb9","size":956,"data":"","first_seen":"2026-07-20T11:29:54.705671Z","last_seen":"2026-07-20T11:34:12.091792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-07-21T20:39:36.581711Z","times_seen":17568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blockadsnot.com/zjsoneditor.min.css","fqdn":"www.blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2840af89159664037956c95de494eb2","sha1":"c9ae52f12853bfc5b344ce1d5ff7d635a3b254de","sha256":"dfc284c4eebeb3e266af81ae0dc00e0cd44fc010e3046c0322c55a8a46910095","sha512":"aaf0902babe8ad24450c86a8a4d1bd4b81961f1bebe2c2f1b69c7a79193d2cdea8e61aee7388a4367417f44d9dbb081a357c1c4aebc5460397668c5808baed76","ssdeep":"768:bt9rqAYKKWZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCagCntlqorf:bbNZzFQ9JsTgZvfzmMzhYrTscpZZl","tlshash":"23132aaab286282601e741ba503eb317b233051679129458fcb9cdf96e3ddc6117b7fc","size":41934,"data":"","first_seen":"2026-07-20T11:29:54.661167Z","last_seen":"2026-07-20T11:34:12.07414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d5e1ae291daa7359d046e4c4b220b8fd","sha1":"6b6d70cee402216e25ec6c3519b8f44130d253fe","sha256":"b514c9840655773ea8e302fd354a7b31b287bedaf4eb820ddc020832c050dce3","sha512":"636009088ce7d628589d5a3c3bb92fd651f789f74e4974ee17fe3b3496c5c70db950ae8243b9f039a40b79aa7797c0808f55ac083beb6dd8b2807379651ab20a","ssdeep":"","tlshash":"cda0126a35717010790621dc00394240f07905740d5c04145415058034480128b9e424","size":82,"data":"","first_seen":"2026-04-01T19:11:59.877498Z","last_seen":"2026-07-21T20:31:58.169465Z","times_seen":3117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5cbcaeaba26e878f5067f80bc2e4afed","sha1":"d0a9541d9e38798ffc36a764c0fe85eb6287aec8","sha256":"17d1c5fc07ae1df238c4904c5b99d7a22210201466ca0e7930820f59e4012914","sha512":"3ff00cc9d1be72be8cc66754790017e6b30d33e7bbd8d9c0f996e95a6b7f982d040ec0982bac9035a152147f572699fef0097e6d71bec62ea7c64814249a0f85","ssdeep":"","tlshash":"5ba012ab7442b00002043305003b5394f2fa09440f0c405080005d04745a216c6b4074","size":86,"data":"","first_seen":"2026-04-01T22:14:46.730558Z","last_seen":"2026-07-21T20:31:58.172024Z","times_seen":3008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cd699c70739469c4fff62614e38b77b7","sha1":"50138e9e6b5012d3cf1d055558a449021696a33f","sha256":"3e1a6d1d655bcd8840b32d035f4b28bfdda119e0ff833c121804314243d74942","sha512":"c7445efe566e91888150d9517e3610e3db16beac42094959a8ec6ca45b773ed0bf2034c0fd647c4d91e04d9e3532e55ba88d72b328fe7d73a9c49a134f323564","ssdeep":"","tlshash":"81a0125e3041f400020d201204368200f17a48604e6c04408100043038b8416c26d175","size":79,"data":"","first_seen":"2026-04-01T22:14:59.481256Z","last_seen":"2026-07-21T20:31:58.170146Z","times_seen":2979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ac9085196e741c45042398e59d103929","sha1":"ef9a4a2eef7e81f3143f731ecefdef4531471ea9","sha256":"2cbafa0cef184adf6838dd6575bcc31cdde2f9055d962a0eb3882e79ffd177df","sha512":"5ce5f10ccd2673db1562670d16f6a219fa83ef5c1d0e0a561b5cb97c68bded46fbfe088e958995e9fb044dffe59a614d13ec979ff0288db054fa7ca03f14f480","ssdeep":"","tlshash":"6ea012bf70a2b08005062809503943c7b07c0540090c201540241410361491082d44b4","size":85,"data":"","first_seen":"2026-04-03T19:37:19.139861Z","last_seen":"2026-07-21T20:31:58.170759Z","times_seen":2716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/603a2f56-f6ea-479a-9c25-569bbc07573b","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"7e4c05936f2bb749c5eb9e29f1a5872c","sha1":"0f2206e77a7736252046a087c07ea5fa4b4b2d27","sha256":"85195a5076ad6bb9a394d20f9c47873bd143be8c38fdab7605fdb4e0c9a4c964","sha512":"333bae58e635d05f936bf9bb3f1e58f6bbf00420a58105c82b48cdbd9f89cea9b24e43a099d632668ebef389a3046d0624f224ed54b66fe06b5ff9cd22a92413","ssdeep":"","tlshash":"a09004035f1d14344f1c0011341474034f04c43313073c54d3050cc5cfc5f50c144314","size":40,"data":"","first_seen":"2026-05-25T18:28:15.515232Z","last_seen":"2026-07-21T20:31:58.186464Z","times_seen":882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinMarquee.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7046f8f1f574e5f2da66f6cb5ba73b61","sha1":"f1d4f8820ce85f44bf92f39df949f12142747f94","sha256":"42ddd8b89cd2f3acae38059fec042e4f4f1d7ef0c5c33fc613f8d1afc9512b6d","sha512":"3b9c4ec5663e952511cb6d7298230603c1ddba8eed390e5950c13e0510d2a7b9c9758713dc1a2e7f7a1146528319db1a4affc9adf4634263747049e967201bfe","ssdeep":"768:6M4hcNGbZ7EX8bKkFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69UsZ7EX8bK+H+3vw+CJ+Ck40","tlshash":"dc4319da72c1b5de02a3f3b5542b0205a23e3e79748dc651f614dec2ae7b46c8613e38","size":58991,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-07-20T11:34:12.058853Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2eed1fe0db36d674643b5f84d2adf46e","sha1":"822bc13e2d55b402eb4233cb23c9d414a7a03bc1","sha256":"1bbd174404efbce95f1af489ef93f4aa0f4d55718f24c3504682216afa7b7fb1","sha512":"791dc51468b19f8557f81771a54480df02aa3f9a7ca6efdf2816c1f062770512a5498e7bab99f5f88948cfd0eef3a131a9a1c7aa6b9f6cd99d3787a5d3ebc0f5","ssdeep":"","tlshash":"b930000000000000000003030000000000000000000000000000000000000000000300","size":4,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-07-21T01:48:31.750687Z","times_seen":20843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JHGX1CL1QD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"991c64de0e7cc2dee9e375bbde311435","sha1":"b57f3f452a6de7735efba1594d8dc88603499fd9","sha256":"b56feb8d1b441e1eb6f2f60bf1a61934afdd361e08e5cbc6bd3e0a208b508fa5","sha512":"60bd18bc63f8f454c15d019851a0e9be62fe1d8737b74fdb1ecd767ee1012e56d55829ffde0e3e850fa804bef2bf32a10b1e8a37fd079f3c3c23d0616e8d42ef","ssdeep":"6144:3D+QrSWJxdsAvg/1vkBNcijVGTZk3TloDVwStc+Iq94N:T+sJDaBZwn+Iac","tlshash":"6da4f8cdb3d674265396f478903f018ba57b29e2b44cc899b189cce02e7469a8177f7c","size":487030,"data":"","first_seen":"2026-07-20T11:29:54.69603Z","last_seen":"2026-07-20T11:34:12.045287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68400a210be129b6a1a412f81d493d86","sha1":"ce6f917e4bacd3ae8694f9e64080378cbeca24f1","sha256":"e8340ae53099489ef252b0c9457d07d3fc99eb8cee466182d517f448312bd21d","sha512":"ea8c0c30396307f1a013fea18ebb13a2969a0e82916352c3f2283509db2a22d1ba427c3c3e8ca404c4788ced0a544ba10022c3417052bdfcc9814d357f6f2969","ssdeep":"","tlshash":"d2a022af30a2b08002003200c03f03a2f0be08808e2c2800c20028b03a2882bc3f80fc","size":71,"data":"","first_seen":"2026-04-01T19:11:59.860695Z","last_seen":"2026-07-21T20:31:58.173219Z","times_seen":3252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9cbdbb09f3f26b8a2bde0b0a0c315ff4","sha1":"686abc80af983527403debceaa226d0ef68d8c61","sha256":"754b5239428f0ac97959e91b576ff26721ea93b8d11e1b77856de66a3c4cc7db","sha512":"58b69bd8f57cb3ffa844409b9c69fa47babebd9a66adf99edbfab2ae55d7b9bdb37a291658fd3db984ded0f0f21e0976efde5543a1f76b289b17c0c57b1593e8","ssdeep":"","tlshash":"d2a012ab3852b08042083306003b43a5f5ba09440e0c404080005d04b45c216c7b4074","size":86,"data":"","first_seen":"2026-04-01T22:14:46.705181Z","last_seen":"2026-07-21T20:31:58.184051Z","times_seen":2986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"50aa77ed2ca0cc90baee72549cf6cf85","sha1":"54ba9fcb1b38741cde6d799698d324bf8edc6bc0","sha256":"fbcf823b5a1275248b3e5c8a980b95b97121476e17f8bdef4b635e912e6c4b94","sha512":"eda9498a33c54e54d23f06776f7547314e0f2db64f40aefb348e9668405f785646beed1aa4a0361d6e88ab896db770f91473c190ee87661b5a9304966be6b30b","ssdeep":"","tlshash":"37b012ef3051b0408214302940370104f07a86808b5d04d0800111603854434c766836","size":88,"data":"","first_seen":"2026-04-01T19:11:59.904827Z","last_seen":"2026-07-21T20:31:58.175226Z","times_seen":2945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f5b8fb86b672a85722934c2665c275e3","sha1":"a9541cca232ed96c72cd5dc6dcdac8df4ef84b1b","sha256":"b1ea50444d5bcf1b1ed4bb2c927c4a13bb88227320361ffe430909b7ab781141","sha512":"29f15c842fc757aea335bbdb3da331a3b587c9a4e3cdae8306cb29806d85222d5d641780b3b835a3383a749ad038d75a0899c8389b34265c2ec78d6db6662636","ssdeep":"","tlshash":"92b012bf30e5750013213514006f139df5bd0a824e8d241060110684b8ec627c2f447c","size":102,"data":"","first_seen":"2026-04-02T06:30:29.523913Z","last_seen":"2026-07-21T20:31:58.182741Z","times_seen":2777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ss.mrmnd.com/banner.js","fqdn":"ss.mrmnd.com","domain":"mrmnd.com","tld":"com"},"ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"885ca05dba407d74c4ec0f030b63ccb8","sha1":"413a1c4e7ecea5ebf9162fef055d09282139dede","sha256":"eead83a9e98fa9297b18168edc2f644a317622ba7e04f82b60457e1ae88c8ac4","sha512":"0d45073263894525a5e7e1ce7a6f5da61b684a1bba2221134eac05ef67da0f71a91952438a1aed77bef28cd3e1144d246eb69e0ac1e8b96da50056b7ac6a31fa","ssdeep":"192:FIBQ2/8V1BPAEER67F+SEpOwrQAOwlWaAFVHtpMaSMt31RSSdKYf3S7O8R:FIBQyk1BRDorM8ZAFVHtpM1MtaSdjKLR","tlshash":"144298cc7b6260868357aa33393fa096b82e9c01aa589448f044f0877d5ff5ee7b7744","size":12816,"data":"","first_seen":"2026-07-11T09:31:08.749797Z","last_seen":"2026-07-20T11:34:12.053016Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"74c436c6028b92a93d890a649f8b20be","sha1":"c0c05eb4195c558ea751219c4a09fdb20d98c49b","sha256":"aa70e09f470667c1d85eb414c63f52aace152733d2e8f5cfb189b29a06b28e44","sha512":"d3d5b572ced5f0f9a2bdeac9e71dab708448c6f0ba07c5042f961eafd11f5a8373fd8705f13472248437a9b12a0c71557d4896a34f9c47201e2832f829d67b28","ssdeep":"","tlshash":"a4a012fa3183600105102b03412f1300f0790484198c30877024002c3824113dbd60a4","size":84,"data":"","first_seen":"2026-04-01T19:11:59.896451Z","last_seen":"2026-07-21T20:31:58.179466Z","times_seen":3340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb584fd0a85fd43215cd4724fa1c40d4","sha1":"fb0ee2bbe99b73ade66b5bacd459aa30356ecc50","sha256":"b7a3091596cdd5b5ec5073f8db1361d186a1c9b43eff1cd8f452ded7c0b3a20b","sha512":"d9ce9ce6e9acad824563a1a35e917346a951ff6cc0a72c0127db9733d7edf872215c191aca8fb9a7f02499043e9d5c3fcadf02c4f1917c54c288a984e7a0d568","ssdeep":"","tlshash":"54a022bf30e3b0000a82300a203e8380f8be0c802e0c2022c00c02003808c30c3fc838","size":71,"data":"","first_seen":"2026-04-01T19:11:59.926557Z","last_seen":"2026-07-21T20:31:58.187054Z","times_seen":3340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e25e8f948fa9de4afd85da1bd293baab","sha1":"7a018daf1d5c37e9285521d0103ce34f6412c662","sha256":"e96bd67cf5242afa0e86224a138f730aa774ddafac2e7090e7a9766a4062d83e","sha512":"1ae9896a451cb8755090d9c309d9ecdf3a144b271af6aa624528193c1c9a390ed72fa85b57862957a138e91c40d0b86e13e2b4f094fd743c5cd3ccb444bd6b70","ssdeep":"","tlshash":"a8a0126f305270041110301540268d01e07a0ac04dbc14d19141c1003444021839a424","size":82,"data":"","first_seen":"2026-04-01T19:11:59.8558Z","last_seen":"2026-07-21T20:31:58.183304Z","times_seen":3319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockadsnot.com/bbvxvcgkbend?QbXwoAhL=BQOCAAAAAAAACZUAAsrbVgrWWt6bIOzjnJuNo3dJnvPEXkPpd54oWVSa7FUsuuokjNW9Ao6tPpx_07rcCiGPZjNWU9NTDC7w5zyQdzFCP80ZHHyIl93KjrjXPIYmQfBbqiWtkdllA8P65YAUH1W0t4KmD8n8lEsfE8U_C5nhPmHT4UYF7m3s4owjqTnmc865yNkuKO7WjUeUli3lRgF52j2Q9hzJN2skennnbt-F_E-pSO8HRke8GADBe-Z-BXWSfcmcy5GOGJMD5hp_uxDiy1cTk6iccExEzqa2uZll57d4qNpakbshCgvx1_ajescjJhvvpPQzAGJTzhGzl4ybSrfsFipCkxRio6i040VadTsUg3sCKys_AUDr7w4Vytb_vq8BlCGvrPggFE13Lp_rXDfPBdwJYUqxLwojZ7X2kNj8ZfH18vXA6aRJAbg091RqbkES5QBC2i8jBi-BdM7RTU0Tk4o63rjp7DxVGxRDU5kh8LzbVZgg29E0l9HkiM91yFb6srJnD6byDKQY9U-EwJV8kun1hgKPmS3eniwPa_c-qOA8eqmHdTEMJNmyDebVyr68XvqL_h5v7mvsRI3fVRItMms7FRDvKbc6sbIrRKueb5FYb09Ht6MJM2krXzWP5LsKqUmaS48k7-OMuDJretvXFNSJeyyhIlYJtZ8kjPOzV8gvzGzlA6bkDFtvgDB9pgpb-KyDE0Tp5qX_mnM6bDG8ljVDVz7oEp5np5t1tfL0A7pwNAx_4zAj10QE0gc116YdEH-SjB9VXggT2tpHCS1Uuh6e4X2fAnmZo9cs0ZemZnHtMy7-SgsNq_OywQH52eySfwurZYUISgEK-QUdxF6-CETj2vGZNaUNj9HR9yTnhzgRLJLrP90JWV2ACSVtyzgmHd0J2lKtkRCBGIXxWkag1GV2__8njiberFZxbURjEVKWITRGynPHB6bWPFJA6NablCzDFgbQWyoJeGkSZMxWvKNv7Lz1WZLx2bbKoDBtFmz4pmrSh-zTuOHJIBm8PZs-OM-gwqN1eue8MEvRPGVkxPV1wJ13J6YpWThlWX7QHuiCA4o2j4VLUytqIzi8dtO06onqKHBGn9ewivvFjzLH1O7nAv3uMpxyq1igd6vkIwYWVhKAo_5VVZa9JvA833ZVcLLn_04r8zXNagpcxunzav2VdIHh5wpWK3VpcabPQYrRr3Gn8RCpgtmm\u0026SuPQFGDp=4\u0026qLIYUVmQ=5247602\u0026ciGZrlNb=\u0026tUEYCOHx=0,0\u0026fQxKTlZp=\u0026OdqFDoRm=\u0026aiQmAyBj=1280,1024,1,1280,1024,0","fqdn":"blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"208.95.112.254","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"429445838231a8669323ba64a7a985b5","sha1":"25022e4d4b0cbd807439b15752da081ad5fc7735","sha256":"629abcd488cb15c5e4eca6368ed6972584a56d2e975db04e4b9f406737d7d1c0","sha512":"68cfa7013d9c1da3b4bdd130af56ea6451d564f22923c1773828297a92ec8ad46d7630b8934802c4bec47a24094b2d029eccf4c0ac398e19f9ead39e83c62a19","ssdeep":"","tlshash":"bb900254692820211dd4757169432aad512b2200561911359245a00a2400496570a2a4","size":49,"data":"","first_seen":"2026-07-20T11:29:54.697375Z","last_seen":"2026-07-20T11:29:54.697375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckmn.com/static/onclicka.js","fqdn":"js.onclckmn.com","domain":"onclckmn.com","tld":"com"},"ip":{"addr":"92.246.95.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6fdf02d4a636649c8d3a10714d11b05","sha1":"6541893b6c3cbaf2dc82c93f09c67524fbf09a85","sha256":"357061a3522f44608ab681540c21b08061ca5fd4908fae0ae45eb9e7bcad0d2a","sha512":"410fa03ba625a528bb42901b6c16a26848edb95f2bfdc6e3775a8758c5aaf0ebf42dfdbe7879bb3245c03881e3416ed15204bfed2d83ee607f930608cf789c65","ssdeep":"1536:OGdniEegEaoMWtOWg8eAVboCQvdv6luOmK8bBSHtOPB41aa+CRtQyXY6E:7epbjtDgcGv8uOm14rlE","tlshash":"35d339d9b2d2b07407e74499d43f1206b73a1a16b90c5058f6aae9c13878dcb6237f7e","size":136104,"data":"","first_seen":"2026-07-08T13:07:16.203294Z","last_seen":"2026-07-21T18:31:14.779282Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fd60794e1759defd862d754e1cb7e2eb","sha1":"ed34c14f844a9b4696e92a69079434dfed487c27","sha256":"2b2298224bbc6264178cf73f40e85e15294129fbe9ec520a68b63e90f70de286","sha512":"7837acfe867e55b34ed2b5628fed4193cbcfc8500a0e182dc56391ed325a84f1d0e7191c97b4973f8c10577c637a838f66644630beb6b84f81fef60ada5f0875","ssdeep":"","tlshash":"47a012fe3053604202102b02113f1301f07b04441e8c3093b12050203814513d6a60a4","size":85,"data":"","first_seen":"2026-04-01T19:11:59.865093Z","last_seen":"2026-07-21T20:31:58.185883Z","times_seen":3336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f66326d5aa79bd5ee6b907a289658c30","sha1":"dcc69d24b41ab65f872d77446a7bc8caece045dc","sha256":"c8c81668eece330cf491e3750327412d9c463878ac4b5f0457e4449dc8170539","sha512":"1eddca4d5af30e255e196a49ed7e1814736a28db5a3ebf50d4dd64984aadd3f2eca693fc6e730d9ef97117b2b4761f6f9d39909fd80ddc2e82710c9305bcda31","ssdeep":"","tlshash":"f5a0126e3041f02086052001803d4340f87848905fac0810400c122434944148258dac","size":83,"data":"","first_seen":"2026-04-01T22:14:59.421367Z","last_seen":"2026-07-21T20:31:58.18467Z","times_seen":2925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"240b9d95dcc2d3e18dc194ea0ef1bc2e","sha1":"44f3831d71211acffae7c281d851a1b723c54ea7","sha256":"fb12a086d3c85415650aee614ddea695d881af76a6d9d614a0ea603945400034","sha512":"ff86854f8429fbbe3a12f6ceba55677a6b5f7f7100ae2adccc44a8db177469073f9f5156e2f1de86685654df0d2b0c9354a733e74a244ea6dc99fd80cb1759ad","ssdeep":"","tlshash":"f2300000000000000c0000c0000000000000000000000300000c00000000000000c000","size":4,"data":"","first_seen":"2023-03-07T13:22:59Z","last_seen":"2026-07-20T11:34:12.085207Z","times_seen":3077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"234e7ee794778023d08ea7b0510c2b25","sha1":"2af0d568db8431a45566f012ced5f92b3754b8be","sha256":"fe32b423faa1ab20a47e15ba6e84878ba9e10225e3b466cd793c5d39336c6cf0","sha512":"d0e284809aa5f00dd46f456016970d27a4a5597824668996a62e27c879beffc4d279b74426cca67f6312ce06e9847febc0e1aea9c4a7c9374fc2b8912546f8ea","ssdeep":"","tlshash":"f4b012fa718364d007302a03c92f132af07944cc9d0d3a87510480bc3824f1bcbf60a4","size":98,"data":"","first_seen":"2026-04-01T19:11:59.914863Z","last_seen":"2026-07-21T20:31:58.187647Z","times_seen":3212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"14d57b64148873ffcb1bda68647248e9","sha1":"314873a8d1e7701e3dcb27b2743ad6bac06f9642","sha256":"aa2a5de85666961dea7cf50cb5b3ade14095b70e204ba50858a24bbf360f8362","sha512":"95436eb730bbc3be8fc360a8496fc26fcf2cc7ce3582ebf3883b0dce6e890f7fec8b7b2ddcabe045e9019cd92cf4003250de7c2eac56c9f865c30b28d55da5f8","ssdeep":"","tlshash":"38a012ba3541b00051083305003b4394f1ba05440e4c4140d001591c756825ad6a40b4","size":86,"data":"","first_seen":"2026-04-01T22:14:46.576038Z","last_seen":"2026-07-21T20:31:58.177285Z","times_seen":2992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"394d04d1e9cc47366ca959c8b4cad597","sha1":"93c7d6d1a712625f7a3254cef30b97c13d278e92","sha256":"be3351b6455b39183a3b428e921af8e17efcf9ed5c8ba6ed042bb42879d0b128","sha512":"a90204833a0e25e9eb535af1b34cb249d4a0e7b9673995c360361ff359ed81951ba47ca52459202b9ddde7d34d4d4fe40b1d4538ed64cee0d5b32b37e2ce8086","ssdeep":"","tlshash":"29b0125f3396700a1b4134d9803a0201e17f0a504f5e0461909268187ce5f3cd3fd2ec","size":98,"data":"","first_seen":"2026-04-02T05:11:03.502476Z","last_seen":"2026-07-21T20:31:58.176607Z","times_seen":2858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c35b273b9b2eeaf22bf9b73f5c3bf381","sha1":"53ed8db47e5e3b98284676f2894720754dc73a71","sha256":"816a8d7ebfd766ed2478e7339b12d82cd64f2bd592bb7260dbf3052b30721b32","sha512":"d34eea5cd8284a21c5a1cbea8a1178f361c7525787c05a943f9d3ba8630f2b5911fbe59ad93e1f211d113906e54de87f29959e8981b0ae7fa4954aad7a0b89c8","ssdeep":"","tlshash":"39b012bf34d571006326361500af239ef5bd0f824e8d141061101288f8eca6bc2f84b9","size":111,"data":"","first_seen":"2026-04-02T06:30:29.505473Z","last_seen":"2026-07-21T20:31:58.178724Z","times_seen":2857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a8cd674806129fb5190a3d09804f08d","sha1":"08cffc1fa3f7e8e571fdd2739833d6f903a8602e","sha256":"dbea1ae8ec463bf1906d276a3f7c140a46ef8c8c2ffb26b9f26d7e92fac63cac","sha512":"1141d37effdfae3075e761896eb61c86431f4dc0464cf5f642c3f138b3d8be8c751c72fd2dc3012a7925653a2206a8b3eefd18b9f828943a9964f2ea1097e67d","ssdeep":"","tlshash":"49b012bf34d5760013223614007f2759f5fd0a930ecd1410602042c4bcfd627c6f48b8","size":104,"data":"","first_seen":"2026-04-02T06:30:29.502554Z","last_seen":"2026-07-21T20:31:58.181531Z","times_seen":2826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"23bbd48136c2820e5faf39b7cd9a227d","sha1":"a804f61ad2dcb05cd55a6d8a0a820bbad965aeba","sha256":"25186a412e38a05ac99771e715310f5f2fcd316b3d5f3d0bf78e3d65813f740d","sha512":"f09de4a8cbbc83f6fa295cc2076b821a41ba01757b5ea8dc1f456a58b9fce1c6e01ceb702041a0d58c023872a3986af7bd4474f13f935d2781c7cc1ec601ccea","ssdeep":"","tlshash":"59b0127f30e274300e4b280450f9c249f07818800e8d0502d024d5303c24c64c2fc6ed","size":103,"data":"","first_seen":"2026-04-03T21:47:38.523611Z","last_seen":"2026-07-21T20:31:58.174568Z","times_seen":2774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/a13a43ad-0d79-4a09-9715-1a182c460eb6","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"a7faf3da63a8e8cb78f5da29d491e5a5","sha1":"adb51f94e962d0e74b8797da2d3178fd2065051f","sha256":"4f8e8393a1729927105a837f789fcfe0f583d298648fc9ea900063b1b766b990","sha512":"ed519affd517c6fe4e95d459986bb41f8fe91ceb6a163c3f2f52546865366be5b58fd46df39db8eb099d969501df4fadced6a3e80b9ce78e6dfa48614c58b35b","ssdeep":"","tlshash":"d65162d4f4a560a75899b874da3fc728212634c77c82c4ecb930dcd02c63549a51efbe","size":2940,"data":"","first_seen":"2026-06-03T18:53:06.229757Z","last_seen":"2026-07-21T20:31:58.172621Z","times_seen":1229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adbytes.media/js/show_ads.js","fqdn":"adbytes.media","domain":"adbytes.media","tld":"media"},"ip":{"addr":"104.21.86.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3b57ef106f263d44892671a5caf4f18","sha1":"2fbf35af4d959e70e684ac81cb5f05796e7b2b44","sha256":"682e67fb1665e981a5e96439d4dc438210c56237487f1f2c89c0a58e6de1373e","sha512":"79ba86dfad222894caa703b80ebde1536e21e975b7031e73190eaccd9a681345c41dc5b863a795272fb1964f71d946d9f186829d5f7fdac315aad1c5e0aa1ed9","ssdeep":"384:bmp3zS7Hjp7/cL+OFUiVgel9otpocwbmhRX1UKzVahiH4uCHDgSi:03qHjp7/cL+O+izWDwbmhRXSKzsiH4zw","tlshash":"8db2e80123d0986c2797cbe52b3fa5e8f72956ae6941d69fc100fc55a7dd213eaec830","size":24056,"data":"","first_seen":"2026-07-20T11:29:54.607802Z","last_seen":"2026-07-20T11:34:12.046028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerads.com/ad/ad.php?width=300\u0026ref=9310","fqdn":"zerads.com","domain":"zerads.com","tld":"com"},"ip":{"addr":"162.0.208.108","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"74f11d131d30e2306179bce73df16947","sha1":"3c62e51e70276ad02d1d9bb0fe6bace122aa5196","sha256":"54775f6ee649645b53f6c6a3e5d82d4827b8eea3064ba6615075c32a5a94b708","sha512":"3feea8f40a2aeedc824ae5c5021fb28227f8ac9984c374e5908a099ea764faba632a894f6abf290deb75efb6d1eb85d1c09bd89775c75da59e7eeacf7371cd79","ssdeep":"","tlshash":"2521a667eeb318a7d10b18ab579b2280da384323e444f25439ac14d14f90b03336aa7d","size":1112,"data":"","first_seen":"2026-07-20T11:29:54.723739Z","last_seen":"2026-07-20T11:29:54.723739Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1d761252711d96c914d00bef0cb19884","sha1":"af8be65647b88120b599c90a5e06ff5b60fc67e2","sha256":"e50007c21eb7fa3afcd217e735a63955899449020380c870831a23061ca7d3f7","sha512":"07d9c04a18c7d233e88f15411113bc5c012fdf1d7ab8aaef3b4316dad6d78f4354d326668a54a16aeed826443c7dbe67aeece15bdf800ba7378d9ba01dc0b973","ssdeep":"","tlshash":"fdb092aa605264d003202a03992a132ab07a44889e0d2992a20090b03814e1bc7b60a4","size":99,"data":"","first_seen":"2026-04-01T19:11:59.903837Z","last_seen":"2026-07-21T20:31:58.173971Z","times_seen":3227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckbnr.com/banner-admanager/build.m.js","fqdn":"js.onclckbnr.com","domain":"onclckbnr.com","tld":"com"},"ip":{"addr":"92.246.95.231","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd85f8736a014f5c03d45b574ec2faf","sha1":"1225990b65fed9f1eb255660230c0d1153a885ea","sha256":"4212088c411cc04888dda02f2401993c4c567e4ca2ba7d89db8da2db37e93ae2","sha512":"d51c55a3cd3f6859d435f9f7bdae27ca562adc6bc1b00c256e522472f8d1ac627df1d0dc473de9dbeb201fadd273c460f76c3607b2176e36c9c5e4771c751db1","ssdeep":"1536:7amtpnZfu3pIDBgJBpqgiZMZR8TzOBOi6mLEIWDDIWA:7t9ZfuTPpqSRM7m43U","tlshash":"7c836b843290b4b541e640afa43f430af33d2d06b40aa458f16dede77b79e896172f39","size":85240,"data":"","first_seen":"2026-02-26T12:18:15.639165Z","last_seen":"2026-07-20T11:34:12.060931Z","times_seen":615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckpp.com/popunder-admanager/build.m.js","fqdn":"js.onclckpp.com","domain":"onclckpp.com","tld":"com"},"ip":{"addr":"92.246.95.231","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"31d347a1b4db33d94fb207a60a7dd774","sha1":"ec498614aab1cb536f2dbe01a63591b353ba56f8","sha256":"2af2ce2deed4d41528daaf3f3e7c6c2e4b79e66fc28b23fb0e44fd9bbb199c0f","sha512":"6a6b5fa9f97bb16f175f628477acdad787f4fdc325ae2753293fecf0f8082057a200d742cbe0a9f11bb10cd2a3dca7fd5f4e859d319883805b68482552a6a510","ssdeep":"768:W0qmOOA1FJb8zunREimbZLrxL5mVuzYB3bPAgCp+dFAioTIZKOxvuoUjYClRtl2M:zOOVYpE1J3I0ui/d+J8DsE48JfI65v","tlshash":"83a31aca32a1b4b002e244da943b0216f33d1929740e905cb7adddd6791ad4fa277f7e","size":107415,"data":"","first_seen":"2026-06-24T06:02:56.049831Z","last_seen":"2026-07-21T11:44:10.393598Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"65b3247b155f4e3321b0e0a8919b7354","sha1":"63aabe337fbb6473c1edb4ce2d380b8c000e7c38","sha256":"e0b1a270c7de3967ba6c4d3ad25f105a2a54a59021c1f23dae2cea3f319e4476","sha512":"a2d4c7cbae0bd945bb9c07642f7041594036965a6e0eb1cc92df283a472b6cbab10051d08276b6877100d529e52ab0a177a786e4f6e7d92a9de8cc7a4318d5ca","ssdeep":"","tlshash":"97c04cbba362d0a4c5055d5eb03ec7d7797b05402d1f7323d02c45243415e1e5b548a4","size":160,"data":"","first_seen":"2026-04-01T19:11:59.923008Z","last_seen":"2026-07-21T20:31:58.171406Z","times_seen":3332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5b06b16f4f21df2f13bd32e7fb31b23","sha1":"7391b77c3b7e26392af8b756352fb9de0c2925b6","sha256":"cf475f64904dffde28ad1f6d312fe5b14fc0996182b02963e2d05762517e1208","sha512":"ea3eeb346d85c77d543bdc7487606be6280114e3415fd8bb17f8dda057efe3ee576731d447cce8fc0a4efa720c565b47cb597f0acdf4648e44b41e6c599d2148","ssdeep":"","tlshash":"aeb0129f739570081f013499c03a4141a27f5a604f5d0071d0626d18bca9e34d3bd2ec","size":100,"data":"","first_seen":"2026-04-02T06:30:29.536755Z","last_seen":"2026-07-21T20:31:58.175828Z","times_seen":2882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"No banner mount target id found: 6096708","filename":"https://js.onclckbnr.com/banner-admanager/build.m.js","line_number":1,"column_number":71772},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//longstractor88 initial:                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         length:80000 type:longString]","filename":"https://c.adsco.re/","line_number":113,"column_number":128},{"level":"debug","text":"map[actor:server1.conn0.watcher16.process8//obj89 class:RegExp displayString:/./ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://c.adsco.re/","line_number":114,"column_number":138}]},"http":[{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/sol.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.855Z","timestamp":1784546948855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/sol.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Jul 2026 00:41:06 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:15:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 384482\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BD73kRR7FETEuq8twnXn%2BXkVqaKZ9OsZmc%2FHSPZO91Scfypg7rhRDEhCpsJBJxYyuMlOVNSH40jzRgpNyMv%2FFIhXP3IQJIMWo40oxkMQ3h5mX2RTn0y51tIabP6WBJSA0ZM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfd35a0f-OSL\r\ncontent-length: 4102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4102,"size_decoded":4885,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"43ba72ad29e28111464625c4ef81b116","sha1":"b4bed8618d2d7b4cf17d799fb7a9ace2646409e7","sha256":"671f037bba5133f1671257388b80791a45139402415f6e3811daaeda06c2153d","sha512":"d9ed0c3fd6db59543f0888a211de67fce4322374f06766f948bd4d4723bd5c8c2674694c9b5c1ff970a26a69db5adea8d711896e68967e2b69f427aa12dab5f0","ssdeep":"96:kRC0aqQL0LuWKIu3rDFDZlFpYEwQxPcOEpgO59GfnWxZTW61Z:oDaqe0yWKB3z+QxE8eOuZ","tlshash":"c3818df28abcc25cde0e4088f464c610dd624a4b7115233732a30457b97a9004b7ae9b","first_seen":"2025-08-03T23:20:04.712629Z","last_seen":"2026-07-20T11:34:12.043148Z","times_seen":8,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinvaganza.xyz/coinvaganza.png","fqdn":"coinvaganza.xyz","domain":"coinvaganza.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.862Z","timestamp":1784546948862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinvaganza.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Jul 2026 19:28:05 GMT","end":"Mon, 12 Oct 2026 19:28:04 GMT"},"fingerprint":{"sha1":"E1:3F:B7:9B:7F:D1:9A:61:CC:CA:AF:C2:62:C2:46:8B:A9:4D:08:C8","sha256":"8B:22:39:17:99:92:61:C6:76:40:4E:65:91:41:C2:BB:86:50:76:B2:78:D0:AE:30:22:99:55:23:00:75:2E:38"}}},"request":{"raw":"GET /coinvaganza.png HTTP/1.1\r\nHost: coinvaganza.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 13 Jan 2026 04:31:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13144\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13144,"size_decoded":13608,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2944e51554601df66e2f7e1571eda7c4","sha1":"3c7c441ecf101542348dc308cea4bfb1ba221ddf","sha256":"554d527c0fb464ba69e702619ab67dfefcd675bc19d3e76b05acdc98a73c1f98","sha512":"6fa70baa8bee209bf21dd2f4b78c121392f601f72429e6d6cf85f643d0a4af3ec212983b717ce5dd4e28ddfe33c9b274b253d8f243b0c1a86169f285c92558be","ssdeep":"384:YX/087zgM6TLa3WX4Dhl5HQufY4vego9uwrTC:YX/Nzg9aGoFfHDvved9uwrTC","tlshash":"af42cf0649a83d689349413e47433da15235d9ada3d08a5b8bb9106cb93cd43cfd9eeb","first_seen":"2026-03-15T22:27:36.512999Z","last_seen":"2026-07-20T11:34:12.050347Z","times_seen":5,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":173,"dns":266,"connect":139,"send":0,"wait":168,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"coinvaganza.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/doge.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.869Z","timestamp":1784546948869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/doge.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Jul 2026 00:41:06 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:16:29 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 384482\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjS6Ih4UY2%2BULpHOwpztEn8aNrLIsKc62rW3VHlWUeBCwTrAIQ6JlJbyb2W12fjqDRYDXNeEndLCnQ2zJpMWLGEqFhu3kIRjjZKFK1uN5vVjPf7Y5mUNA8fnfUZ4rtB6%2BYxP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfd25a0f-OSL\r\ncontent-length: 7916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7916,"size_decoded":8695,"mime_type":"image/png","magic":"PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced","md5":"254f46952b4badcc3e943e0a0af2b549","sha1":"4c92faed824d541a242d246e57c5c993f245f410","sha256":"52c815b855e3e6d45d110e846f4e2cbce638263226bf81319330ff027fadf8f4","sha512":"ae9d34ebbb3dfbb71f55880bdcc2a7fdfa065b65f9d01a7e0a8a8f4db423b4676df4b3d3685070a42bb8293dadef46b7560f77532cc50499b280eb0ebc19a369","ssdeep":"192:uSVRCxupAmZpvqJROCujOwSzQUKDrk20zH:uSVUxulLMoRjOWyL","tlshash":"abf1b062e5f51ba95ed8ee5a50325f0d70c06e49b8d3878d82b3897c0bcd8c451be2e7","first_seen":"2025-08-03T23:20:04.756036Z","last_seen":"2026-07-20T11:34:12.073315Z","times_seen":8,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adbytes.media/js/show_ads.js","fqdn":"adbytes.media","domain":"adbytes.media","tld":"media"},"ip":{"addr":"104.21.86.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.825Z","timestamp":1784546948825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adbytes.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 22:13:23 GMT","end":"Fri, 28 Aug 2026 23:12:00 GMT"},"fingerprint":{"sha1":"91:16:A8:6E:6D:56:1B:E8:51:2F:75:2B:80:ED:F0:C0:B5:5D:D1:79","sha256":"CE:0C:91:68:DE:26:7E:DA:50:93:76:89:66:00:EA:89:90:5F:B5:B9:F9:A5:B3:39:D9:AE:55:8A:31:61:CD:A5"}}},"request":{"raw":"GET /js/show_ads.js HTTP/1.1\r\nHost: adbytes.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 22:06:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a331a6e-5df8\"\r\nexpires: Sun, 26 Jul 2026 06:17:47 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 105081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUomJwBpXngH9y%2FFlwV0S4WkDlcWWFIhGyK2MmqoLgEiD5qKPKSzC%2BZ52AkEKuJx6dHx%2FqEHm3%2FwWrTYf44lvH0gTIT%2FDp%2FXmizY1Wgl7vyufJJAIVI6iBt6iW4nfM%2FS\"}]}\r\ncf-ray: a1e1a05e4b1d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24056,"size_decoded":9817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24056), with no line terminators","md5":"b3b57ef106f263d44892671a5caf4f18","sha1":"2fbf35af4d959e70e684ac81cb5f05796e7b2b44","sha256":"682e67fb1665e981a5e96439d4dc438210c56237487f1f2c89c0a58e6de1373e","sha512":"79ba86dfad222894caa703b80ebde1536e21e975b7031e73190eaccd9a681345c41dc5b863a795272fb1964f71d946d9f186829d5f7fdac315aad1c5e0aa1ed9","ssdeep":"384:bmp3zS7Hjp7/cL+OFUiVgel9otpocwbmhRX1UKzVahiH4uCHDgSi:03qHjp7/cL+O+izWDwbmhRXSKzsiH4zw","tlshash":"8db2e80123d0986c2797cbe52b3fa5e8f72956ae6941d69fc100fc55a7dd213eaec830","first_seen":"2026-07-20T11:29:54.607802Z","last_seen":"2026-07-20T11:34:12.046028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixtoshi.com/mix.png","fqdn":"mixtoshi.com","domain":"mixtoshi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.861Z","timestamp":1784546948861,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /mix.png HTTP/1.1\r\nHost: mixtoshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"mixtoshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/fonts/bootstrap-icons.woff2?1fa40e8900654d2863d011707b9fb6f2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.201Z","timestamp":1784546949201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.5/font/fonts/bootstrap-icons.woff2?1fa40e8900654d2863d011707b9fb6f2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 121340\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.10.5\r\nx-jsd-version-type: version\r\netag: W/\"1d9fc-TA788dzMcpXvwm+r6B/+jyjVlKM\"\r\naccept-ranges: bytes\r\nage: 1638133\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nx-served-by: cache-fra-eddf8230063-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121340,"size_decoded":122068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121340, version 1.0","md5":"a30fb81bd52143bcd4de2898422ac8b9","sha1":"4c0efcf1dccc7295efc26fabe81ffe8f28d594a3","sha256":"cfe45b981d1b91b173361a34cfce5f60893dbd1ac4af2c3ac11fc17552c5401f","sha512":"c3ee9bd353a1e7de0c247651215b4b34f69c0027b987f7779271d61cd5122a6c72a38d52c2d91275d9e76eed0b08c4e6cda61341e077005c70ab790295eb858e","ssdeep":"3072:C+xOSRn4WSWWB2D3MbpqVc0TTYgR4piXvhIOO+yJr6ag4xYDH0X:FxNuIWBq3MQpYg4iXvhIOgO4xYD0X","tlshash":"ebc322155435719494d4f197b173fbfb89d9fa013329cfb17d9e88a6832026f22a6370","first_seen":"2023-05-03T23:58:42Z","last_seen":"2026-07-21T22:00:00.162469Z","times_seen":4113,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/2.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.401Z","timestamp":1784546949401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/2.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1507\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 07 Dec 2020 19:07:54 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 19 Jul 2026 11:34:43 GMT\r\netag: \"f6bc1e449dc5bc28f54f7df07b2c2712\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 86279\r\nx-amz-cf-id: OXR_k8E01S-H6rlllDSKaVL5daPGdtMz3bX6nsznWyyXgcH8f7cvRg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1507,"size_decoded":2003,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"f6bc1e449dc5bc28f54f7df07b2c2712","sha1":"c7071b98ec48b1a7c303d2593c772ce42fe709ce","sha256":"12523501996e31c888ba97e221f91e2033222e7e7c7a21e1e755133f45646c7a","sha512":"9c789af7d9b8e371b3671ffa4e47967571e8256f3237390410cd9906084cd98fd33dc550b9b42e2635a3f901f03ca79bf7fec4dd7bb76f86e450c3e9c01e09e9","ssdeep":"","tlshash":"5831d7bb4d7926296f459ea98273b5ad9ee2b4650373b216c8d20108055c805ebb2357","first_seen":"2023-06-19T16:26:48Z","last_seen":"2026-07-20T11:34:12.051029Z","times_seen":179,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":13,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1072065074:1784546950080592","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:10.125Z","timestamp":1784546950125,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /v3/signin/identifier?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1072065074:1784546950080592 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-GAPS=1:5lJxTqwsJy6CAcrWRd6DKRGeNPyTxg:1-uxCxWf2CDnbzoD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 20 Jul 2026 11:29:10 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-730u3ElwYE3pWCxTBTJjpw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.YzLJIkuOLZk.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fpjwni0houlc.s4.adsco.re/","fqdn":"fpjwni0houlc.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:12.488Z","timestamp":1784546952488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 09:14:13 GMT","end":"Mon, 05 Oct 2026 09:14:12 GMT"},"fingerprint":{"sha1":"E2:DC:81:F5:6B:FD:F1:16:E9:4F:A8:73:21:A8:7F:86:C4:38:85:28","sha256":"BD:66:E6:71:3F:9E:4A:55:44:75:30:50:E1:25:FC:CC:8D:1B:86:F1:C9:06:1F:58:F2:7C:57:38:20:F8:8B:6D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fpjwni0houlc.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 20 Jul 2026 11:29:13 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":156,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":1065,"timings":{"blocked":0,"dns":197,"connect":174,"send":0,"wait":173,"receive":0,"ssl":521},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.101Z","timestamp":1784546953101,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ex-faucet.xyz/\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.821Z","timestamp":1784546948821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.10.5\r\nx-jsd-version-type: version\r\netag: W/\"16e26-p4ONiiDb2g7p5MHLfx+DLOmvHBE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\nage: 1638430\r\nx-served-by: cache-fra-eddf8230053-FRA, cache-bma-essb1270068-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12865\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93734,"size_decoded":13647,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8f4b242830ec54686815617e7b5a5b1b","sha1":"a7838d8a20dbda0ee9e4c1cb7f1f832ce9af1c11","sha256":"d8824f7067cdfea38afec7e9ffaf072125266824206d69ef1f112d72153a505e","sha512":"d326210b288c07ee973a2b38aaf580e3690f90a6f9e3eb8c68e85bb2d6ba9be690edc64e9b98731113eb4649249e5a44768c550b062e8bec8cd2345ace90c5b8","ssdeep":"768:Rqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMW:gOocm4FJwZ5ijINRDlIib","tlshash":"5493fdba914f05f9d341e4d92743674693aaba3ce1813c7ad342399ee3c16188ad73dc","first_seen":"2023-05-09T04:19:23Z","last_seen":"2026-07-21T22:00:00.159383Z","times_seen":8373,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T11:29:07.317Z","timestamp":1784546947317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ex-faucet.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:13:53 GMT","end":"Sun, 13 Sep 2026 18:13:52 GMT"},"fingerprint":{"sha1":"41:45:1C:B1:DB:71:D6:86:2A:20:67:3F:5C:80:63:E6:A6:CA:B1:54","sha256":"D7:89:72:5A:CA:5B:01:95:19:97:39:D3:55:AB:C3:24:60:95:C7:A3:AA:EA:B0:BE:C8:1B:39:AA:98:09:87:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ex-faucet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\nset-cookie: csrf_cookie_name=3b563db457cf9fbbf23f00e0d42319bb; expires=Mon, 20-Jul-2026 13:29:08 GMT; Max-Age=7200; path=/; secure\nci_session=59d4eafd0cd7cc584dc50bb712dffe05849c0286; expires=Mon, 20-Jul-2026 13:29:08 GMT; Max-Age=7200; path=/; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":29708,"size_decoded":6851,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4019), with CRLF, LF line terminators","md5":"bad5833d32933b6159490229680073b2","sha1":"9d8bbddb4f5ba9c06ab0fbd263c5ae59f01ae62c","sha256":"2527f1506c0a27031c0cc8e7ddd3ac75172f573607dd844d3022a3c04b88153c","sha512":"31fea659c03549349096022db7e13afd646e56a7152776bec2e65cd27c884bc687e85fd218a97cacd32092bc7c868e421dd64341e5be12f41b8d6a8a8f25ffc7","ssdeep":"768:IpExFWaEq8Rc+zMBIVcikkU75LaIOkFZF/KxVx2:RxUavpvYV4","tlshash":"e6d2b6b155f96866828284e1fa327e4f5a93b507c7e7891db7fd13c2af82d614c0b84c","first_seen":"2026-07-20T11:29:54.617624Z","last_seen":"2026-07-20T11:29:54.617624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":645,"connect":139,"send":0,"wait":163,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"ex-faucet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"ex-faucet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/ltc.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.853Z","timestamp":1784546948853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/ltc.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Jul 2026 00:41:06 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:16:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 384482\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvF7qC0FMcK3eYLFRnyoUu8kdNca%2BROW%2BZApT7VNg5GqVx1frOqdm6F9gbOCK1UBF4Jw3Qfl4lrVq%2FUf69pu2tFVKTmnUANQm8qqdm8LqnFFjNp9Du9A%2FCk6Jf1qNa2YxXIq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfcd5a0f-OSL\r\ncontent-length: 1271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1271,"size_decoded":2056,"mime_type":"image/png","magic":"PNG image data, 100 x 101, 8-bit colormap, non-interlaced","md5":"28e8c2fc4f01b3ace8abfc7ffd44e128","sha1":"9ea9b070e36e08e4b726724cf66caea17f23911f","sha256":"3c33bab35e222c3f2814694bdb2f5b953f82153b19ba30e02dab3457e38515ef","sha512":"1bd69093573c438ed1b3c7a7329a87a1c30e1217c53743ca7ab4c4a2f618de00b2fb2dec05e11968fbb1bb5bb737a3bd58c86f45cb13aea17e07c6637ff7efc9","ssdeep":"","tlshash":"5d21b433d2083eec91d2410916a3c260ac0c2e9dff00864df7dbb24dc67e648b0b4003","first_seen":"2025-08-03T23:20:04.830892Z","last_seen":"2026-07-20T11:34:12.040298Z","times_seen":8,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":206,"dns":0,"connect":14,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.421Z","timestamp":1784546949421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1759\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 07 Dec 2020 19:06:44 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 05:13:43 GMT\r\netag: \"260aeac4b1626aecd0e88471a14ad8d9\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 23107\r\nx-amz-cf-id: xmOsD7rYfQClblGZDHykKBi0mMZD_jc6mXPao4_ZxD-Hvg9z4zryug==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1759,"size_decoded":2255,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"260aeac4b1626aecd0e88471a14ad8d9","sha1":"c575ce19a2a34cfacf9c84c04ff896827c65d933","sha256":"51a9972c6f13b5510730dff6c349f812510c778b2f7722f00426c287246c50cf","sha512":"bf1e327dd18483249a0a2bc6fc18e04934f99af93639e74c70f2b2357f1e9e1df4a9432e73835225183021ba50474d2423e806c0d2c82040bbeeefa1212cbc69","ssdeep":"","tlshash":"bd3108965f8423c76f2c056136bfe203db5c18207e7062deed5b7a157a213056d4b36a","first_seen":"2023-04-19T16:22:05Z","last_seen":"2026-07-21T08:08:44.909973Z","times_seen":809,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niataregister.org/icon.png","fqdn":"niataregister.org","domain":"niataregister.org","tld":"org"},"ip":{"addr":"159.198.74.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerads.com/ad/ad.php?width=300\u0026ref=9310","date":"2026-07-20T11:29:12.759Z","timestamp":1784546952759,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.niataregister.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 01:29:57 GMT","end":"Wed, 30 Sep 2026 01:29:56 GMT"},"fingerprint":{"sha1":"5B:94:7C:D8:0D:D4:FB:38:7A:40:BD:8C:0E:2D:91:C8:54:45:00:7D","sha256":"90:A0:F5:BE:78:21:B1:CB:E2:6C:08:B7:E5:0F:F4:1E:91:3C:4D:C0:AA:0A:0E:C1:70:26:EA:39:04:47:FB:69"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: niataregister.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zerads.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 11:29:13 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 24 Jun 2026 09:12:19 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 633\r\nKeep-Alive: timeout=5, max=25\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":633,"size_decoded":874,"mime_type":"image/png","magic":"PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced","md5":"e866d373f3711721ba5cb478a4d25a86","sha1":"0db08f52fba2ab0bcde38da6d131c252bd26ccb3","sha256":"58eb80fa685f79fb1ab96256b36b9753dd4b2d678f97d1f5b6bfb6b9fe5c3f7c","sha512":"0d0c376a4d6eb1b8e5ee7fa9bc27dacbd62479ab40a030ffe0a0a137c660aedb064af0e152532f6e2089497aa36c113791baa4f26c323ef1d0b5d2690fe3cfba","ssdeep":"","tlshash":"36f068e0e584b4449e35556107951865eca6718beee18757cc005d11d40558f0fa63d3","first_seen":"2024-04-29T00:43:43Z","last_seen":"2026-07-20T11:34:12.053507Z","times_seen":199,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":0,"dns":3,"connect":172,"send":0,"wait":172,"receive":0,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.438Z","timestamp":1784546953438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=x-user-defined\r\nReferer: https://ex-faucet.xyz/\r\nContent-Length: 3695\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 11:29:13 GMT\r\nContent-Type: text/plain\r\nContent-Length: 955\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://ex-faucet.xyz\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Max-Age: 10\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Content-Type, Referer, Content-Length, Origin, Sec-GPC, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Priority\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-cache, no-store, no-transform, max-age=0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":1626,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"3f3b19fd665ce7e30262ffabadf07166","sha1":"49b98c1ad358449761862d0220b082a16a29a943","sha256":"42a34d10cc5ac7b76d3598cf230f23fad2242669bf8c2ad556c8b5866f797c30","sha512":"b421726f863e63e22d3d8aa34a35d772f43cb163adc970045fac26b6ba61e17597be1b9d0bb96921ace36ba26e8afe02be40b4ed166d5aa8741bb67027d20476","ssdeep":"","tlshash":"1f21bab9154cd27a5f951d82b54bb5590eb58ecbd5243ca953005e1ad7116700145a48","first_seen":"2026-07-20T11:29:54.627191Z","last_seen":"2026-07-20T11:29:54.627191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":0,"dns":0,"connect":92,"send":0,"wait":154,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex-faucet.xyz/coinlogo/pepe.png","fqdn":"ex-faucet.xyz","domain":"ex-faucet.xyz","tld":"xyz"},"ip":{"addr":"162.244.92.2","port":443,"asn":46824,"as":"NAMECRANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.866Z","timestamp":1784546948866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ex-faucet.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:13:53 GMT","end":"Sun, 13 Sep 2026 18:13:52 GMT"},"fingerprint":{"sha1":"41:45:1C:B1:DB:71:D6:86:2A:20:67:3F:5C:80:63:E6:A6:CA:B1:54","sha256":"D7:89:72:5A:CA:5B:01:95:19:97:39:D3:55:AB:C3:24:60:95:C7:A3:AA:EA:B0:BE:C8:1B:39:AA:98:09:87:08"}}},"request":{"raw":"GET /coinlogo/pepe.png HTTP/1.1\r\nHost: ex-faucet.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nCookie: csrf_cookie_name=3b563db457cf9fbbf23f00e0d42319bb; ci_session=59d4eafd0cd7cc584dc50bb712dffe05849c0286\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 11:29:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Oct 2025 18:35:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78889\r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78889,"size_decoded":79333,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b9bb3ab51ec22a0ea89e27e037e55ac2","sha1":"fbc9aab54e8816849be164187ee36ed45d1fd47b","sha256":"798f69c166af6c3e9401d0408b4f7d3df574efa8babfa920ac4bb72f66d37d9d","sha512":"6d44fab7b29da8cde19ce5083178ab54ee7dc93888e7b7a6bf61526be421664cf7384aea6426844d02245215be8e8e6816adfa1bc5b45148f31c7d9e31ce5f91","ssdeep":"1536:ZGxfNffajVm+BGKVBI+qIkGh64s7P2D6JMldXg4Iv6w:IxftMVm+BLgGhwQXDw","tlshash":"6e7302728aa833ce8e0cd7e7950f17e09643d1298c9af8e50441efb5d592d897320e6a","first_seen":"2025-08-03T23:20:04.834812Z","last_seen":"2026-07-20T11:34:12.03862Z","times_seen":12,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"ex-faucet.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"ex-faucet.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclcktg.com/tags/387553?version_name=d\u0026domain=ex-faucet.xyz","fqdn":"bid.onclcktg.com","domain":"onclcktg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.266Z","timestamp":1784546949266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.onclcktg.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 02:34:11 GMT","end":"Sat, 29 Aug 2026 02:34:10 GMT"},"fingerprint":{"sha1":"14:3B:BE:75:2E:D2:DC:70:B8:C2:BF:EC:2E:57:56:44:CD:F1:54:D3","sha256":"D2:E4:3E:D6:92:FE:1D:FB:A3:D6:33:DE:A8:A5:34:8C:AF:AA:DA:AF:45:AE:28:92:F5:BA:B0:64:70:25:C6:F9"}}},"request":{"raw":"GET /tags/387553?version_name=d\u0026domain=ex-faucet.xyz HTTP/1.1\r\nHost: bid.onclcktg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2621,"size_decoded":2855,"mime_type":"application/json","magic":"JSON text data","md5":"a3ab5446559ab95448b11efca51aa4d1","sha1":"0c99b6b24072b80906cbe25843288f33b8359c6d","sha256":"ffcb194f5e1b44856e26201a67f978f779ff41d202c3fa8685186f53da5bac92","sha512":"0cc5f7c3bc46e5f5ac0fa5baa47f15354a4bcc5e8864f620d288559be529a960695c308f7354a5fe760bd4286137789ff1fea56e2491f3104f0b105000f27e60","ssdeep":"","tlshash":"665142bd9a6458fe81d006cac5997a0902613157f0ccb496e4ed89bc22cf5e51b3b23f","first_seen":"2026-06-17T15:26:59.082091Z","last_seen":"2026-07-20T11:34:12.047254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":31,"connect":20,"send":0,"wait":34,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/28321.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.430Z","timestamp":1784546949430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/28321.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 647\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 16 Sep 2025 11:06:01 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 04:29:39 GMT\r\ncache-control: public, max-age=86400\r\netag: \"c15c5e826dd9c3ba54585aa9a02cf3e3\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 25520\r\nx-amz-cf-id: 75xYg92P6FuhEvKDJn54LgAubQOOKzxld47xQvAxnZS_ZJPpayrpEQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":647,"size_decoded":1218,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c15c5e826dd9c3ba54585aa9a02cf3e3","sha1":"3a62eae636f5d35f7c79962f5f4b31232c6bec76","sha256":"4ea59b9fdfa61c56337ba2214c9b05c886625508f0931ffe96b187ae51593343","sha512":"9c73754dd2366bac18cf0717152f777684d083ef3af2a8d4cdd698be87b76a8795a668cccdbfc4b4d8eca122785e93c037213ec376780186de2ff65d1b6f004e","ssdeep":"","tlshash":"cef023d5bde328da4cf98b3f7610d4a04055fe64a52d411c2a816493659d549464d907","first_seen":"2026-03-07T13:07:25.784047Z","last_seen":"2026-07-20T11:34:12.071569Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onclckinp.com/keywords","fqdn":"onclckinp.com","domain":"onclckinp.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.611Z","timestamp":1784546949611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 01:55:45 GMT","end":"Mon, 21 Sep 2026 01:55:44 GMT"},"fingerprint":{"sha1":"05:20:90:8F:DE:43:2A:A6:86:3B:9B:CD:00:AF:A6:35:49:32:35:F3","sha256":"60:B6:88:E5:AE:3B:E3:44:DA:4B:1F:DF:B3:E5:34:89:C3:9D:92:5F:15:43:49:57:DC:08:81:56:AC:60:33:63"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: onclckinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ex-faucet.xyz/\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.20.1\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":301,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":32,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckpp.com/popunder-admanager/build.m.js","fqdn":"js.onclckpp.com","domain":"onclckpp.com","tld":"com"},"ip":{"addr":"92.246.95.231","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.615Z","timestamp":1784546949615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.onclckpp.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 02:33:34 GMT","end":"Sun, 30 Aug 2026 02:33:33 GMT"},"fingerprint":{"sha1":"59:73:13:87:FE:F2:80:0D:93:0B:2B:41:79:51:41:B3:0C:63:D0:48","sha256":"D9:07:78:4F:45:85:4D:1A:E1:D1:49:39:56:2B:4A:57:76:F4:7F:8E:06:B8:BB:82:30:82:72:58:27:B1:CA:18"}}},"request":{"raw":"GET /popunder-admanager/build.m.js HTTP/1.1\r\nHost: js.onclckpp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 23 Jun 2026 11:17:11 GMT\r\netag: W/\"6a3a6b37-1a397\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 20 Jul 2026 11:34:09 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS9544\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107415,"size_decoded":32411,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"31d347a1b4db33d94fb207a60a7dd774","sha1":"ec498614aab1cb536f2dbe01a63591b353ba56f8","sha256":"2af2ce2deed4d41528daaf3f3e7c6c2e4b79e66fc28b23fb0e44fd9bbb199c0f","sha512":"6a6b5fa9f97bb16f175f628477acdad787f4fdc325ae2753293fecf0f8082057a200d742cbe0a9f11bb10cd2a3dca7fd5f4e859d319883805b68482552a6a510","ssdeep":"768:W0qmOOA1FJb8zunREimbZLrxL5mVuzYB3bPAgCp+dFAioTIZKOxvuoUjYClRtl2M:zOOVYpE1J3I0ui/d+J8DsE48JfI65v","tlshash":"83a31aca32a1b4b002e244da943b0216f33d1929740e905cb7adddd6791ad4fa277f7e","first_seen":"2026-06-24T06:02:56.049831Z","last_seen":"2026-07-21T11:44:10.393598Z","times_seen":136,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":42,"connect":20,"send":0,"wait":36,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.108Z","timestamp":1784546953108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ex-faucet.xyz/\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:13 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 47\r\naccess-control-allow-origin: https://ex-faucet.xyz\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a1e1a078f8d356b5-OSL\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":497,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"97371a5b7684a7bb03d958acf3a754bd","sha1":"991b887a41c68808cd504973b45b875f990d0acb","sha256":"6d1001ef2cf194e51f89ad368630ac52a4de7b07f7c02dc90dfc7423cf6fcf9e","sha512":"8013f34e400b5a94353e84bce21d34e591633083c427d346fdcf17c5474431f83c4a17047aefcaa97364424ef44ab6e57b27bc2dc60d997e69aa941ef8caa058","ssdeep":"","tlshash":"8290024511a42f1585e24645518144109266438261c2aa14c75e71b65881241d062664","first_seen":"2025-12-19T23:45:08.346815Z","last_seen":"2026-07-21T20:31:58.11798Z","times_seen":1362,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/excoinred.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.859Z","timestamp":1784546948859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /excoinred.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Jul 2026 23:53:09 GMT\r\nlast-modified: Sat, 07 Feb 2026 02:29:29 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 387359\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKHm11dvjYuu121tT4eZ7W%2B2DbrhuuQMzmH0sKovSQBVGnHioJet82LD8Y%2BTL21d9v0wmAH0erm8GkICWZpf05I1eJGgR0HP0CP8bkftMEaR%2FVkoCjcKTeK84eC23D9TFe1O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfd05a0f-OSL\r\ncontent-length: 103422\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":103422,"size_decoded":104205,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced","md5":"5fdc3ff1ea713ab4e268b91ebe224335","sha1":"8e823d7ae3ecbbfe675f73545b634e507d9bbe49","sha256":"6573ddcd7498fd23368984d6d8564d8808047b368310c4ce13d73f409208a9f8","sha512":"21cadf9e868c1f7119c956363d4714efd0d34f25eace01c96de62eb21e623c542890dbedeb3c72377cc875b8fd4bcca281436025448a23cc91d49cd84daf38b4","ssdeep":"1536:N0r9IEZCPSebBiPqC20fHX4Oma7x3oYcilm8EZVCgkSY1fNxhzbggH7KjlZ/jtDT:BBM2+46ciYVZVhIfNxCg2D/RDVHyY4+1","tlshash":"b4a312b4444cdcd4d167937fa7f6c3dde92311881e2d08ba772892aa29d01997a7f03b","first_seen":"2026-03-15T22:27:36.522177Z","last_seen":"2026-07-20T11:34:12.069865Z","times_seen":5,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blockadsnot.com/zjsoneditor.min.css","fqdn":"www.blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.149Z","timestamp":1784546949149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1158060716.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 02:33:00 GMT","end":"Wed, 09 Sep 2026 02:32:59 GMT"},"fingerprint":{"sha1":"58:59:3B:26:1D:AE:58:14:C7:6A:15:C5:47:43:E9:03:88:F6:B3:C4","sha256":"61:C6:8E:40:D5:95:3F:52:13:95:B1:EE:65:88:32:93:26:11:0F:CB:3A:81:CC:22:FF:58:B9:9E:67:B6:99:A0"}}},"request":{"raw":"GET /zjsoneditor.min.css HTTP/1.1\r\nHost: www.blockadsnot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=259200, immutable, stale-if-error=259200, stale-while-revalidate=259200, must-revalidate\r\nexpires: Thu, 23 Jul 2026 10:42:33 GMT\r\nlink: \u003chttps://blockadsnot.com/\u003e;rel=preconnect,\u003chttps://c.adsco.re/\u003e;rel=preload;as=script,\u003chttps://adsco.re/p\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\netag: W/\"9d3a9e0067740dd23bcfc0ec08526cd6\"\r\nx-77-nzt: k0U0wX8bufLsWsOJKdiW4yQ9pZS+2Hkdet6huD4IOMKvtY/2YIlES1MgbUaGTELYOw\r\nx-77-nzt-ray: 2a494a15ee3a0695ad065e6a8a5b1e13\r\nx-77-cache: HIT\r\nx-77-age: 1988\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: https://ex-faucet.xyz\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41934,"size_decoded":12887,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"f2840af89159664037956c95de494eb2","sha1":"c9ae52f12853bfc5b344ce1d5ff7d635a3b254de","sha256":"dfc284c4eebeb3e266af81ae0dc00e0cd44fc010e3046c0322c55a8a46910095","sha512":"aaf0902babe8ad24450c86a8a4d1bd4b81961f1bebe2c2f1b69c7a79193d2cdea8e61aee7388a4367417f44d9dbb081a357c1c4aebc5460397668c5808baed76","ssdeep":"768:bt9rqAYKKWZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCagCntlqorf:bbNZzFQ9JsTgZvfzmMzhYrTscpZZl","tlshash":"23132aaab286282601e741ba503eb317b233051679129458fcb9cdf96e3ddc6117b7fc","first_seen":"2026-07-20T11:29:54.661167Z","last_seen":"2026-07-20T11:34:12.07414Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3200,"timings":{"blocked":-1,"dns":34,"connect":1,"send":0,"wait":26,"receive":0,"ssl":3139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/widget?id=1,1027,825,2,1958,24478,74,5426,131,28321\u0026convert_id=2781","fqdn":"3rdparty-apis.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.115","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.269Z","timestamp":1784546949269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Thu, 05 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E7:C3:E1:82:1C:B9:33:41:49:DA:99:D4:24:C5:BF:FA:51:0A:E1:DD","sha256":"AA:B1:23:FF:FD:AA:09:B6:24:65:4B:3D:C0:77:15:44:6B:48:EB:C7:BA:52:DE:64:54:F6:8C:1D:44:F3:EE:16"}}},"request":{"raw":"GET /v1/cryptocurrency/widget?id=1,1027,825,2,1958,24478,74,5426,131,28321\u0026convert_id=2781 HTTP/1.1\r\nHost: 3rdparty-apis.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 20 Jul 2026 11:28:31 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nserver: Tengine\r\naccess-control-allow-credentials: false\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: WWW-Authenticate,Server-Authorization\r\ncache-control: max-age=30, must-revalidate\r\ncontent-encoding: gzip\r\nx-traefik-route: coinmarketcap-thirdparty-apis\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a5b7b01c87fd24c09aedb45d99294e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: khsOEW-uy-4oqjaLQhVThDenxoDmV2iqC14rjbnetI2y7v_rSHy7QQ==\r\nage: 38\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9955,"size_decoded":3408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0d84483679cb7314cce191a397ecde94","sha1":"2b8f7e6ff72144d53c6c355c5209d5167dfe6336","sha256":"f9ceb4344353b417a3c8d24a3526dc5bb654a1f79efee1a4b93d826a5e59a5f6","sha512":"db1aed729f7838952c4ac40b39b44f2d2b916671e166ecffc3db6fc54b021fa5d5b8c57998e08fbae85bb5bcc9cf2293057d89321a5c65ee7983e47ffff66f47","ssdeep":"96:IQ2NIJKY2dgVAJDHjlLUtIoYJKY2d00KijUUqGATXGGE:IQrIlRabjJqGHV","tlshash":"2022759703781c76c53e5450040637cc1c2eb4fac8985a6e16de4fad82eafe75287e6e","first_seen":"2026-07-20T11:29:54.667046Z","last_seen":"2026-07-20T11:29:54.667046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":33,"connect":12,"send":0,"wait":40,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"klmmnd.com/v1/e51e9eaf-cd2b-4934-8ef6-842efe43d625","fqdn":"klmmnd.com","domain":"klmmnd.com","tld":"com"},"ip":{"addr":"169.150.247.35","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.322Z","timestamp":1784546949322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"klmmnd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 00:15:28 GMT","end":"Sat, 26 Sep 2026 00:15:27 GMT"},"fingerprint":{"sha1":"34:58:3C:3C:A8:53:05:D7:55:25:B0:8C:8D:FE:EB:59:61:9A:EC:B8","sha256":"6E:9F:D4:E5:FB:88:3A:8A:A1:0A:A7:A1:30:11:18:48:F6:8B:A6:8C:1F:DC:E2:06:A3:D6:7D:16:F7:B2:8B:26"}}},"request":{"raw":"POST /v1/e51e9eaf-cd2b-4934-8ef6-842efe43d625 HTTP/1.1\r\nHost: klmmnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 104\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":156,"data":"K½p™\níhÝ\u0010½#ÛD½(\u0003æ3ÇQ¹fÑ\u0019°y…Ià%†\u0013ðhÁYë Æ]ãp’\u0016­\u0013ÎUò`‚\\øÍC©)–\u0018÷eÞ\tí7›\bú6Ê\u0004¦/ËTø3ÒO¯n™\u001aæ7ÃS³}Ä\tû0‚Zø0Å\u0002¬%×"}},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nserver: BunnyCDN-DE1-1078\r\ncdn-pullzone: 3663465\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 07/20/2026 11:29:09\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: 6090ef1a17e46ad52645daad8f6b5097\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1300,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":137,"connect":94,"send":0,"wait":33,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.098Z","timestamp":1784546953098,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ex-faucet.xyz/\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerads.com/ad/ad.php?width=300\u0026ref=9310","fqdn":"zerads.com","domain":"zerads.com","tld":"com"},"ip":{"addr":"162.0.208.108","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.161Z","timestamp":1784546949161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zerads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 03:57:56 GMT","end":"Wed, 19 Aug 2026 03:57:55 GMT"},"fingerprint":{"sha1":"DA:AF:BC:3E:1E:3A:C1:EA:27:D6:24:CB:B2:5E:22:79:35:3E:0C:2E","sha256":"34:57:D2:09:DF:C5:31:9C:18:E5:98:36:B2:79:B8:A6:84:A7:32:81:79:82:31:3B:75:DA:BF:42:2C:4E:FF:60"}}},"request":{"raw":"GET /ad/ad.php?width=300\u0026ref=9310 HTTP/1.1\r\nHost: zerads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 11:29:09 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nContent-Length: 1227\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2971,"size_decoded":1507,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (477)","md5":"d1933296731bbb9698de9d8d6bbdb018","sha1":"691b2e5d828d7c20a544ca3e088295677f0cc621","sha256":"d2a9ee988cb9fb30f62b9d9120cced447fc75c92828f28be2c41dbf330278b5b","sha512":"0adde5a7a28f8ffe9a834cc14f76c54210e5132cb540d7787c98ef2c60b251208f0cad06e634923da596c1a52290e58632eac55589ec7c85cadf92257a1e43d0","ssdeep":"","tlshash":"c151969bdd631023e50b15e667526344b0368257eca2f9443abd05eacf8075332cb7ec","first_seen":"2026-07-20T11:29:54.672552Z","last_seen":"2026-07-20T11:29:54.672552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3515,"timings":{"blocked":-1,"dns":3,"connect":154,"send":0,"wait":3047,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/131.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.405Z","timestamp":1784546949405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/131.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1523\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 07 Dec 2020 19:07:04 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 19 Jul 2026 12:09:32 GMT\r\netag: \"558ec5e746eef56e90d35bea14db400f\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 83978\r\nx-amz-cf-id: llyaGlDbvItTg34-tkdIErqSsGCPBuuopjBsUCeQwto4bn4nZbjhbA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":2019,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"558ec5e746eef56e90d35bea14db400f","sha1":"9991ab9279847d34ab020e0093b0421b0c680026","sha256":"10619864533c107f63afd6eed3e101cd5275e0ceaed88a864ef2acc194ee161d","sha512":"1e87572a78fcf63499fb5f150aa8626ef0fec23479eba0c8e916578ad1b10b23d5bceb2c13b5d6dff20565d9a97631420fcc93945c5ad377851558e8ef50a742","ssdeep":"","tlshash":"4c31c9f7517a8932a48c437042a19bf730f14a160bf533f6fb7354bf99005681980baa","first_seen":"2023-07-31T21:35:07Z","last_seen":"2026-07-20T11:34:12.070466Z","times_seen":45,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckbnr.com/banner-admanager/build.m.js","fqdn":"js.onclckbnr.com","domain":"onclckbnr.com","tld":"com"},"ip":{"addr":"92.246.95.231","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.616Z","timestamp":1784546949616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.onclckbnr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Jun 2026 02:31:56 GMT","end":"Thu, 03 Sep 2026 02:31:55 GMT"},"fingerprint":{"sha1":"2D:D5:9A:A9:62:4A:9E:6B:84:69:E4:FB:61:34:41:AE:02:DB:56:12","sha256":"E6:23:D2:DA:87:5D:D5:0E:3A:D3:4A:77:D0:53:65:D9:50:BE:84:A3:DF:25:3C:C4:10:33:61:F4:1A:6D:2A:40"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.onclckbnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 26 Feb 2026 11:22:56 GMT\r\netag: W/\"69a02d10-14cf8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 20 Jul 2026 11:34:09 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS9544\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85240,"size_decoded":27250,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fcd85f8736a014f5c03d45b574ec2faf","sha1":"1225990b65fed9f1eb255660230c0d1153a885ea","sha256":"4212088c411cc04888dda02f2401993c4c567e4ca2ba7d89db8da2db37e93ae2","sha512":"d51c55a3cd3f6859d435f9f7bdae27ca562adc6bc1b00c256e522472f8d1ac627df1d0dc473de9dbeb201fadd273c460f76c3607b2176e36c9c5e4771c751db1","ssdeep":"1536:7amtpnZfu3pIDBgJBpqgiZMZR8TzOBOi6mLEIWDDIWA:7t9ZfuTPpqSRM7m43U","tlshash":"7c836b843290b4b541e640afa43f430af33d2d06b40aa458f16dede77b79e896172f39","first_seen":"2026-02-26T12:18:15.639165Z","last_seen":"2026-07-20T11:34:12.060931Z","times_seen":615,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":23,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.789Z","timestamp":1784546949789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:40:14 GMT","end":"Mon, 21 Sep 2026 08:40:13 GMT"},"fingerprint":{"sha1":"93:91:8D:27:B0:C4:5A:8E:4D:AE:13:60:22:57:A6:AD:23:05:64:C6","sha256":"4D:58:57:46:FA:21:8C:CF:FC:2E:FB:76:42:37:3D:E8:82:32:15:46:F2:01:11:6B:C4:DC:8B:9C:F1:B9:FB:29"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:5lJxTqwsJy6CAcrWRd6DKRGeNPyTxg:1-uxCxWf2CDnbzoD; Expires=Wed, 19-Jul-2028 11:29:10 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 20 Jul 2026 11:29:10 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1072065074:1784546950080592\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-Qci3tL5Nzl6yHuAdsRfhaA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":56,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"klmmnd.com/v1/cc326a9a-6979-466a-a88c-0d09ee94b16c","fqdn":"klmmnd.com","domain":"klmmnd.com","tld":"com"},"ip":{"addr":"169.150.247.35","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.325Z","timestamp":1784546949325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"klmmnd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 00:15:28 GMT","end":"Sat, 26 Sep 2026 00:15:27 GMT"},"fingerprint":{"sha1":"34:58:3C:3C:A8:53:05:D7:55:25:B0:8C:8D:FE:EB:59:61:9A:EC:B8","sha256":"6E:9F:D4:E5:FB:88:3A:8A:A1:0A:A7:A1:30:11:18:48:F6:8B:A6:8C:1F:DC:E2:06:A3:D6:7D:16:F7:B2:8B:26"}}},"request":{"raw":"POST /v1/cc326a9a-6979-466a-a88c-0d09ee94b16c HTTP/1.1\r\nHost: klmmnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 104\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":156,"data":"MërÎ\u0005é0Ú\u0010è~Þ\u001f½(€\u0006³3ž\fç3Ñ\u0011à{ÙJà(\u0015÷l—_½\"‘Rç(•\u0016øNË\u000eò`Y­”\u001e÷|–\u0010§g‚\ní:œ\u000eý2œ\u0002ð-œ[ükÕOú3œAæ7ÌVæ}T¥e‚R¨2™\u0001¬(Ð"}},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nserver: BunnyCDN-DE1-1078\r\ncdn-pullzone: 3663465\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 07/20/2026 11:29:09\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: c41c9f0e6a5247a1f024b37bc9ce8482\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1300,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":62,"connect":23,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.819Z","timestamp":1784546948819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 33205\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nage: 1638437\r\nx-served-by: cache-fra-eddf8230065-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232914,"size_decoded":33966,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-07-21T20:39:36.580668Z","times_seen":24930,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":4,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckmn.com/static/onclicka.js","fqdn":"js.onclckmn.com","domain":"onclckmn.com","tld":"com"},"ip":{"addr":"92.246.95.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.827Z","timestamp":1784546948827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.onclckmn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:34:35 GMT","end":"Sat, 12 Sep 2026 02:34:34 GMT"},"fingerprint":{"sha1":"4C:22:95:01:02:58:25:F3:6B:4B:CD:38:14:4D:76:05:08:BB:16:4C","sha256":"8A:F2:82:26:9F:14:B3:FF:30:F3:2E:23:12:A6:85:BF:98:6C:23:9C:39:58:47:EA:C3:7B:79:B5:3C:55:1B:07"}}},"request":{"raw":"GET /static/onclicka.js HTTP/1.1\r\nHost: js.onclckmn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 08 Jul 2026 11:52:17 GMT\r\netag: W/\"6a4e39f1-213a8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 20 Jul 2026 11:34:08 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136104,"size_decoded":47029,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e6fdf02d4a636649c8d3a10714d11b05","sha1":"6541893b6c3cbaf2dc82c93f09c67524fbf09a85","sha256":"357061a3522f44608ab681540c21b08061ca5fd4908fae0ae45eb9e7bcad0d2a","sha512":"410fa03ba625a528bb42901b6c16a26848edb95f2bfdc6e3775a8758c5aaf0ebf42dfdbe7879bb3245c03881e3416ed15204bfed2d83ee607f930608cf789c65","ssdeep":"1536:OGdniEegEaoMWtOWg8eAVboCQvdv6luOmK8bBSHtOPB41aa+CRtQyXY6E:7epbjtDgcGv8uOm14rlE","tlshash":"35d339d9b2d2b07407e74499d43f1206b73a1a16b90c5058f6aae9c13878dcb6237f7e","first_seen":"2026-07-08T13:07:16.203294Z","last_seen":"2026-07-21T18:31:14.779282Z","times_seen":27,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":38,"connect":21,"send":0,"wait":21,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/ex-zone.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.867Z","timestamp":1784546948867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /ex-zone.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 11:29:09 GMT\r\nlast-modified: Fri, 19 Sep 2025 10:03:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaRYSt08Pd%2F3IVr3IHwEaY6vrrWVHoy7dyLr3pdlxHEoK0tDXc%2B35Pu73eysNzgkG2DrwzMnnI%2BmbT7%2BoYbutxmmzkU5jAIplVWHkbptx3zGg9kqc3hVQOPB%2FI6UDmcsotGS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfcf5a0f-OSL\r\ncontent-length: 151918\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":151918,"size_decoded":152687,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced","md5":"988178b8ad03ff5e92a3faa46f7c9378","sha1":"439784695c73717bd7d17b3f0e10ffeb7fdd1297","sha256":"f74c66c8f9d2621e22fcbc42d8205822f92ba161df6438c2658250d93c308ca6","sha512":"26ddd499d132ca1723ab582ee07bd9b25ba5b22043b90dc31ae4fdae617f7d11b23edfae47dade9af737908e8aea0392817e18a33f3cd16d84539de248429279","ssdeep":"3072:koy6XAsPRhvexjd9U8iFDMpavS6UAvY7aVu+rf9ygxAnzh42:konX/WFbbASoUVyu+T9y/nNt","tlshash":"b6e312382f8c2549c8b36f3c782e985710f2d21166619b9035f7752a21d3937f9bb74a","first_seen":"2026-03-15T22:27:36.562422Z","last_seen":"2026-07-20T11:34:12.041531Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1374,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":864,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/trx.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.870Z","timestamp":1784546948870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/trx.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Jul 2026 00:14:04 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:17:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 386104\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8a%2FMYTTviPfA72yFRAreknHkx%2Fm7lf23mv0FaS7RHv%2BH4pHtRQdgVJLqXJGBDEa54ASP6NN9w4vedBrQ2qriFKRh1PREfTeWGvhvAQm4eDNcgOn1LSJXaxY6gXLiiuBQ1hs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfce5a0f-OSL\r\ncontent-length: 1745\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1745,"size_decoded":2526,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"e86598ad6e3db22d639eb36a6dbac459","sha1":"7edd4436be537e8fe34dbc15f2e12eb8bc191e4b","sha256":"b4680f9146375e06b4d126f0b981a84397e9160212896ba5ea1ecb15e0515b1e","sha512":"e37a5885b3b9946d1d8913ea6204b258907eda039a40dcbc6259f9385f6c76409cbd041ccc37fecf52e999a141632739af21fcb15cdeedda315500c0d43ac9aa","ssdeep":"","tlshash":"b431d6927238f818f3e78d52daf26a5c5b0447b3774146cf29d52ad3ce689c040b5606","first_seen":"2025-08-03T23:20:04.678702Z","last_seen":"2026-07-20T11:34:12.046715Z","times_seen":12,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=90c9c494-b3c4-47f1-82f4-5ae0dbc513a7\u0026subid=1400604364\u0026spot_id=6096702\u0026created_at=2026-07-20\u0026timezone=0\u0026ver=1.172.5","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.771Z","timestamp":1784546949771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 01:55:45 GMT","end":"Mon, 21 Sep 2026 01:55:44 GMT"},"fingerprint":{"sha1":"05:20:90:8F:DE:43:2A:A6:86:3B:9B:CD:00:AF:A6:35:49:32:35:F3","sha256":"60:B6:88:E5:AE:3B:E3:44:DA:4B:1F:DF:B3:E5:34:89:C3:9D:92:5F:15:43:49:57:DC:08:81:56:AC:60:33:63"}}},"request":{"raw":"GET /in/dip?event_id=90c9c494-b3c4-47f1-82f4-5ae0dbc513a7\u0026subid=1400604364\u0026spot_id=6096702\u0026created_at=2026-07-20\u0026timezone=0\u0026ver=1.172.5 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":320,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":3,"connect":34,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/pepe.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:10.017Z","timestamp":1784546950017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/pepe.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Jul 2026 05:54:50 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:16:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 365659\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5slKwWoAax0UvEVuWndgBioXnENz%2FlbpBx1T8ynf3W1bmlnV62qicPc%2Ftlpzkx87mnvDLOQfn65va%2FoSnVH1QM5MYiLKDp7t4egwdLtiSiZXpZGt9PkkEWVu6KRIzXOHI9i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1e1a06598f45a0f-OSL\r\ncontent-length: 78889\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78889,"size_decoded":79674,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b9bb3ab51ec22a0ea89e27e037e55ac2","sha1":"fbc9aab54e8816849be164187ee36ed45d1fd47b","sha256":"798f69c166af6c3e9401d0408b4f7d3df574efa8babfa920ac4bb72f66d37d9d","sha512":"6d44fab7b29da8cde19ce5083178ab54ee7dc93888e7b7a6bf61526be421664cf7384aea6426844d02245215be8e8e6816adfa1bc5b45148f31c7d9e31ce5f91","ssdeep":"1536:ZGxfNffajVm+BGKVBI+qIkGh64s7P2D6JMldXg4Iv6w:IxftMVm+BLgGhwQXDw","tlshash":"6e7302728aa833ce8e0cd7e7950f17e09643d1298c9af8e50441efb5d592d897320e6a","first_seen":"2025-08-03T23:20:04.834812Z","last_seen":"2026-07-20T11:34:12.03862Z","times_seen":12,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fpjwni0houlc.l4.adsco.re/","fqdn":"fpjwni0houlc.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:12.485Z","timestamp":1784546952485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 09:14:21 GMT","end":"Mon, 05 Oct 2026 09:14:20 GMT"},"fingerprint":{"sha1":"C1:89:F6:1E:F2:3D:9D:B4:6F:C9:C8:3E:2E:2C:F2:55:D2:62:F0:5D","sha256":"90:53:FA:F7:A6:88:EC:20:F6:8E:1D:D1:0B:A9:2F:57:14:9A:12:25:C8:F4:F1:D0:6B:FC:58:C6:67:AA:C8:90"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fpjwni0houlc.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 20 Jul 2026 11:29:12 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":156,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":39,"connect":27,"send":0,"wait":27,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ss.mrmnd.com/banner.js","fqdn":"ss.mrmnd.com","domain":"mrmnd.com","tld":"com"},"ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.824Z","timestamp":1784546948824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ss.mrmnd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 14:04:17 GMT","end":"Fri, 09 Oct 2026 14:04:16 GMT"},"fingerprint":{"sha1":"7E:20:32:5D:D8:4D:50:FC:28:86:9B:BC:D6:76:AA:78:78:90:97:23","sha256":"47:79:A5:C6:FA:8F:0B:EF:8D:5E:2E:12:45:46:36:F9:AA:1B:3E:BB:48:E6:DA:92:A2:35:78:81:41:47:B0:A4"}}},"request":{"raw":"GET /banner.js HTTP/1.1\r\nHost: ss.mrmnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-DE1-1334\r\ncdn-pullzone: 1495838\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: zstd\r\netag: \"6a435bd0-3210\"\r\nlast-modified: Tue, 30 Jun 2026 06:01:52 GMT\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/30/2026 08:48:22\r\ncdn-edgestorageid: 1048\r\ncdn-requestid: af872207c2def0f70755f565c42abf16\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12816,"size_decoded":6467,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12815)","md5":"885ca05dba407d74c4ec0f030b63ccb8","sha1":"413a1c4e7ecea5ebf9162fef055d09282139dede","sha256":"eead83a9e98fa9297b18168edc2f644a317622ba7e04f82b60457e1ae88c8ac4","sha512":"0d45073263894525a5e7e1ce7a6f5da61b684a1bba2221134eac05ef67da0f71a91952438a1aed77bef28cd3e1144d246eb69e0ac1e8b96da50056b7ac6a31fa","ssdeep":"192:FIBQ2/8V1BPAEER67F+SEpOwrQAOwlWaAFVHtpMaSMt31RSSdKYf3S7O8R:FIBQyk1BRDorM8ZAFVHtpM1MtaSdjKLR","tlshash":"144298cc7b6260868357aa33393fa096b82e9c01aa589448f044f0877d5ff5ee7b7744","first_seen":"2026-07-11T09:31:08.749797Z","last_seen":"2026-07-20T11:34:12.053016Z","times_seen":8,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":105,"connect":110,"send":0,"wait":25,"receive":-1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixtoshi.com/mix.png","fqdn":"mixtoshi.com","domain":"mixtoshi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.148Z","timestamp":1784546949148,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /mix.png HTTP/1.1\r\nHost: mixtoshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"mixtoshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1958.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.423Z","timestamp":1784546949423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1958.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1478\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 07 Dec 2020 19:07:51 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 07:05:53 GMT\r\netag: \"6378a7bd4ec1056f91c3fd783b22263b\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 15979\r\nx-amz-cf-id: 8nNUO2f0JSKgu3k0HXrdSRzPjiWUCvLCrq_jljiIklIEE-_ChkHYSA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1478,"size_decoded":1974,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"6378a7bd4ec1056f91c3fd783b22263b","sha1":"a29c560d9eda5099bb1643569dca56728d80e991","sha256":"376da0eee16f85a651360f09bff6ad6b135520c4298c0ae8012e1bd70c920caf","sha512":"5d34d3b9a051c8858c837563df5823d89d34ade538a697820d496fbb2011150e3fc915061c159ba959642fd1a035eefed30e620c6f461a75494f0707f2f6a343","ssdeep":"","tlshash":"7b3194908a67f4e0f1893533f6a3680c9b92738926f176c7554353378314506b390563","first_seen":"2023-05-20T23:54:44Z","last_seen":"2026-07-20T11:34:12.051605Z","times_seen":165,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onclckinp.com/keywords","fqdn":"onclckinp.com","domain":"onclckinp.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.608Z","timestamp":1784546949608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 01:55:45 GMT","end":"Mon, 21 Sep 2026 01:55:44 GMT"},"fingerprint":{"sha1":"05:20:90:8F:DE:43:2A:A6:86:3B:9B:CD:00:AF:A6:35:49:32:35:F3","sha256":"60:B6:88:E5:AE:3B:E3:44:DA:4B:1F:DF:B3:E5:34:89:C3:9D:92:5F:15:43:49:57:DC:08:81:56:AC:60:33:63"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: onclckinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 75\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":75,"data":"{\"ad_tags\":\"PEPE%2CZone%2CCrypto%2CZone\",\"page\":\"https%3A//ex-faucet.xyz/\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 31\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":384,"mime_type":"application/json","magic":"JSON text data","md5":"d0e3bfba119ceb3c7712f533af0b314a","sha1":"d3dd5d05cd3562095d03869a55d12f64c113de37","sha256":"6a0be29afde74fc112ddeeae7acd7c7b5ee0253a8e06f7c84ff2c1f954eb74d8","sha512":"742d32dac8e6d56d04949373ea5f3332d7a78cc263696fee48fea19d2343ba35af31ecc46a2cd189e363a6c729736def95c1d358d5e1a458d9b49b4c69eaad8e","ssdeep":"","tlshash":"2380040414455451cdd0500d3534c5145415d54110414d543154d001435c300440cc57","first_seen":"2024-08-20T11:01:54.434372Z","last_seen":"2026-07-20T11:34:12.047985Z","times_seen":9,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:12.398Z","timestamp":1784546952398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:12 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 10\r\ncache-control: public, max-age=604800, immutable, stale-if-error=86400, stale-while-revalidate=86400\r\nexpires: Sat, 20 Jun 2026 07:41:35 GMT\r\nlink: \u003chttps://adsco.re/p\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"6869e570bbc1793d11f4519ca1363634\"\r\nlast-modified: Wed, 27 May 2026 19:42:03 GMT\r\nvary: accept-encoding\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a1e1a0749d9c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98274,"size_decoded":36131,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (642)","md5":"6869e570bbc1793d11f4519ca1363634","sha1":"355497054687450b1222004137f8046384bcd36c","sha256":"725ba965568831a01b475b74c359ff88ae0a4825c2850078b024a031356fbc0f","sha512":"ff4d0086bcfd3efc5507b0937e5bb8f31ddc4e66d07ae8d5c19d6d188381da375fd91ee0b615aaea4d916171c578bbcd35b4394fdd1b2e021d7e2f63aa5f3fb8","ssdeep":"1536:YK7iVMXr2hzVk/T+OmP4nlySHPoLWhmytPtd3xQhtwdR1bVGAHgae5im3oaHh4f0:v7XXr2hOaOmQnlySHkGzRtGBae5im3ZH","tlshash":"44a37cb6b621703912f220f9167f2306b1b60b216c598491a376dae43c75ddb833ff99","first_seen":"2026-05-27T20:04:06.956182Z","last_seen":"2026-07-21T20:31:58.112419Z","times_seen":1763,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fpjwni0houlc.n4.adsco.re/","fqdn":"fpjwni0houlc.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:12.487Z","timestamp":1784546952487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 09:14:10 GMT","end":"Mon, 05 Oct 2026 09:14:09 GMT"},"fingerprint":{"sha1":"A0:FE:C3:31:9A:78:A9:27:BB:A2:CC:9F:AC:CD:A5:A9:0A:7E:9F:3A","sha256":"D3:B6:6F:A5:F5:D8:07:3C:75:7F:CC:1B:99:63:DD:55:66:AB:3C:C8:95:CE:6D:4C:1D:01:A5:A1:A8:D5:49:72"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fpjwni0houlc.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 20 Jul 2026 11:29:12 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":156,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":110,"connect":86,"send":0,"wait":87,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinMarquee.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.837Z","timestamp":1784546948837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/widget/coinMarquee.js HTTP/1.1\r\nHost: files.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 58991\r\nlast-modified: Tue, 23 Feb 2021 08:31:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 19 Jul 2026 21:54:41 GMT\r\netag: \"7046f8f1f574e5f2da66f6cb5ba73b61\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LGpebigTVSJGrxYkR1yKRF12sZd9Wyk2k0yXm6KvnzpDOsIMOiEebg==\r\nage: 48868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":58991,"size_decoded":59460,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58900), with no line terminators","md5":"7046f8f1f574e5f2da66f6cb5ba73b61","sha1":"f1d4f8820ce85f44bf92f39df949f12142747f94","sha256":"42ddd8b89cd2f3acae38059fec042e4f4f1d7ef0c5c33fc613f8d1afc9512b6d","sha512":"3b9c4ec5663e952511cb6d7298230603c1ddba8eed390e5950c13e0510d2a7b9c9758713dc1a2e7f7a1146528319db1a4affc9adf4634263747049e967201bfe","ssdeep":"768:6M4hcNGbZ7EX8bKkFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69UsZ7EX8bK+H+3vw+CJ+Ck40","tlshash":"dc4319da72c1b5de02a3f3b5542b0205a23e3e79748dc651f614dec2ae7b46c8613e38","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-07-20T11:34:12.058853Z","times_seen":630,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":55,"connect":44,"send":0,"wait":28,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/pepe.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.850Z","timestamp":1784546948850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/pepe.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 78889\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Jul 2026 05:54:50 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:16:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 365658\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ve%2BZcdjbkEyakPP%2FIJACO%2BnKRyGONFWBR9d9CVlcRJ%2B8Vk00yAufd1uZsTo3uRI%2BVWOuUs19ccYmDahySEE7JR4drCjdi7qidbIPIQc4QgpjtnDZUa%2FEJbN3qgPwjN%2F1EG1s\"}]}\r\ncf-ray: a1e1a05f1dd835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78889,"size_decoded":79657,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b9bb3ab51ec22a0ea89e27e037e55ac2","sha1":"fbc9aab54e8816849be164187ee36ed45d1fd47b","sha256":"798f69c166af6c3e9401d0408b4f7d3df574efa8babfa920ac4bb72f66d37d9d","sha512":"6d44fab7b29da8cde19ce5083178ab54ee7dc93888e7b7a6bf61526be421664cf7384aea6426844d02245215be8e8e6816adfa1bc5b45148f31c7d9e31ce5f91","ssdeep":"1536:ZGxfNffajVm+BGKVBI+qIkGh64s7P2D6JMldXg4Iv6w:IxftMVm+BLgGhwQXDw","tlshash":"6e7302728aa833ce8e0cd7e7950f17e09643d1298c9af8e50441efb5d592d897320e6a","first_seen":"2025-08-03T23:20:04.834812Z","last_seen":"2026-07-20T11:34:12.03862Z","times_seen":12,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":102,"dns":1,"connect":1,"send":0,"wait":15,"receive":4,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/5426.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.425Z","timestamp":1784546949425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/5426.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1271\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 25 Jan 2024 08:50:23 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 06:35:30 GMT\r\ncache-control: public, max-age=86400\r\netag: \"dc582f5db39e86bbfc04dee57859cfec\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 17620\r\nx-amz-cf-id: 8c2EPkVuy9h2DtCo-LRNP2f8Nn6E8eqsQL2tzwuGwwyV2XiN-XT0DQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1271,"size_decoded":1843,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"dc582f5db39e86bbfc04dee57859cfec","sha1":"74fb3ff9979e3c604a0e54b92b49536f9da8d739","sha256":"41816786249843e8443ea5813fa03abe4267b074b349d44e2c2fecd430b1d412","sha512":"565daeaba8526d573ca35bdcc0ed05bfd2016139c26c618bdb5056107f9780e17f9bd50ca6c4f7f7d99c18322f240ce9388d6351478040812b9075eff4a93655","ssdeep":"","tlshash":"9d21e77304842c28ad2d5cc772082f966ef1966b991c06ec1c0964fd3352fdab5ae767","first_seen":"2024-01-30T01:14:06Z","last_seen":"2026-07-20T11:34:12.064347Z","times_seen":92,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=90c9c494-b3c4-47f1-82f4-5ae0dbc513a7\u0026subid=1400604364\u0026spot_id=6096702\u0026created_at=2026-07-20\u0026timezone=0\u0026ver=1.172.5","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:10.194Z","timestamp":1784546950194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 01:55:45 GMT","end":"Mon, 21 Sep 2026 01:55:44 GMT"},"fingerprint":{"sha1":"05:20:90:8F:DE:43:2A:A6:86:3B:9B:CD:00:AF:A6:35:49:32:35:F3","sha256":"60:B6:88:E5:AE:3B:E3:44:DA:4B:1F:DF:B3:E5:34:89:C3:9D:92:5F:15:43:49:57:DC:08:81:56:AC:60:33:63"}}},"request":{"raw":"GET /in/dip?event_id=90c9c494-b3c4-47f1-82f4-5ae0dbc513a7\u0026subid=1400604364\u0026spot_id=6096702\u0026created_at=2026-07-20\u0026timezone=0\u0026ver=1.172.5 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Mon, 20 Jul 2026 11:29:10 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":320,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.841Z","timestamp":1784546948841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\nage: 1638454\r\nx-served-by: cache-fra-eddf8230047-FRA, cache-bma-essb1270068-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80421,"size_decoded":24779,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-07-21T20:39:36.581711Z","times_seen":17568,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs.eu.cckmnd.com/sync/446/?uid=019f7f49-787a-7f92-a0c5-ce97567f191c","fqdn":"cs.eu.cckmnd.com","domain":"cckmnd.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.248Z","timestamp":1784546949248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs.eu.cckmnd.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 10:05:40 GMT","end":"Sun, 11 Oct 2026 10:05:39 GMT"},"fingerprint":{"sha1":"3F:DE:75:15:23:96:66:AB:3C:F0:BB:30:D0:1A:A7:4E:28:B4:A4:25","sha256":"E6:44:A2:25:57:F3:C9:DB:C0:4D:06:C5:D4:F1:0A:9B:A3:29:7A:98:F2:B5:BF:D3:78:C5:EC:A8:D7:8A:D5:85"}}},"request":{"raw":"GET /sync/446/?uid=019f7f49-787a-7f92-a0c5-ce97567f191c HTTP/1.1\r\nHost: cs.eu.cckmnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 83\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 5416238\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nset-cookie: tuid=019f7f49-7967-76e4-a44a-aaa957661834; Path=/; Domain=.cckmnd.com; Max-Age=31536000; Expires=Tue, 20 Jul 2027 11:29:09 GMT; Secure; SameSite=None\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/20/2026 11:29:09\r\ncdn-edgestorageid: 755\r\ncdn-requestid: bcfd162b1abb5d974dc58ca6d5c1c65a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":796,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26d993653a4cb1ffe6afb120cd4cd77b","sha1":"592ee9fa1d907a6bf8ffb136fb1bbd200abf97cd","sha256":"ad39f2d8a4cdd4a2387b38467933fb709848c9d4d940d4fb6e6c5c9c88a7044a","sha512":"9ab12f079225e80e2e01a0a2da72815f2aeed093841929bf616c68f2cf113752c72cc6c1a4d1fd64af0a07f95be62a9302914976905857aa6ca7288e289f5ab6","ssdeep":"","tlshash":"e4a01248a008c821603485505a78040043961043c080114fd4c008205210493150919e","first_seen":"2024-05-27T12:30:50Z","last_seen":"2026-07-20T11:34:12.043711Z","times_seen":128,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":0,"dns":146,"connect":107,"send":0,"wait":33,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/24478.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.426Z","timestamp":1784546949426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/24478.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1557\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 10 Aug 2023 04:10:01 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 02:52:39 GMT\r\ncache-control: public, max-age=86400\r\netag: \"683f44008cdb156a0f432a636d84e244\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 30991\r\nx-amz-cf-id: cn4ByUKqAK3EtJ4HEqhtHVlOLKylnhCQYAQgbBepHsu56qOWZWSfBQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1557,"size_decoded":2129,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"683f44008cdb156a0f432a636d84e244","sha1":"3f7c00eed23f50dad7b128bc31f98b89d2a1921f","sha256":"0d4ff26656625b22f14cfc4cef6dea8e399c7479add73d171ab91a77a0e590d2","sha512":"a4ae780eb2518519361a1150d82edac5789b4a1e22df38145a7958251491484e6769c408292bc4aa70c4b3e4e41cfd4996ee026f2683fa770153b0a9690a7960","ssdeep":"","tlshash":"c0310a9762c16917f5fbf1371d4d049387e623a55f60f95c2a2cca2482be0f3a0c538a","first_seen":"2025-08-03T23:20:04.824356Z","last_seen":"2026-07-20T11:34:12.067158Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excoinbit.online/coinlogo/usdt.png","fqdn":"excoinbit.online","domain":"excoinbit.online","tld":"online"},"ip":{"addr":"172.67.211.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.857Z","timestamp":1784546948857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excoinbit.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 02:55:57 GMT","end":"Mon, 07 Sep 2026 03:55:43 GMT"},"fingerprint":{"sha1":"DD:2A:2A:FC:11:B7:EC:B2:DC:79:2C:37:C1:86:31:74:39:A1:D4:AD","sha256":"87:6C:46:FB:54:23:45:0F:18:0F:2D:2F:E7:38:60:F2:74:5D:23:9E:80:0A:35:1A:53:4E:03:65:1B:AE:11:F5"}}},"request":{"raw":"GET /coinlogo/usdt.png HTTP/1.1\r\nHost: excoinbit.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Jul 2026 23:35:09 GMT\r\nlast-modified: Fri, 08 Aug 2025 09:15:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 388439\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG2NzP7oEdWoWjapfT4fvI%2FbdkXr6BpU2cLx4QYrPWqWpmtEyLkFW38JhI1eWzYVfOhH8P2Am4T1n1gtyLnNGNJ2hFlN7Xs4w7ROVnKBr7hLMtWZzUQubd1j4QFcBuRL1RC2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1e1a05fdfd15a0f-OSL\r\ncontent-length: 1554\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1554,"size_decoded":2331,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"05e7d566a756a52995688af3aca9cca4","sha1":"32598b5526035e3b34e95b6d84d29722f822903c","sha256":"d0c7092d27f87dc3bf3e82cdc171e2e0166e08d029dcfebffc43d2cadcabf54d","sha512":"e8ba415f2a26ec3c87a408422c5fd08cd5ae847759a849b3d80f813910a1547a24945d8e4ecad9a4a425aac80a6f75802996b1902317ea2f236a44e8dacf5e7c","ssdeep":"","tlshash":"4831b7d602237ef680b7a2301730825365947ea7b125f188bacc3c242abee01ad4b653","first_seen":"2025-08-03T23:20:04.737327Z","last_seen":"2026-07-20T11:34:12.069253Z","times_seen":7,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"excoinbit.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.399Z","timestamp":1784546949399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1573\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 07 Dec 2020 19:06:42 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 02:33:03 GMT\r\netag: \"9b9545b0e6a87b4aa1009f10f35c37d2\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 32199\r\nx-amz-cf-id: t7BZ19isz0nd9s6QND44M2T0tfBQ7ssvJdvDjLaDtzUj2M-vfYC5wQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1573,"size_decoded":2069,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9b9545b0e6a87b4aa1009f10f35c37d2","sha1":"f5f942a5ea3a33ffcfb3d1d6e64233571bf843b5","sha256":"2b6064887ef3e3f56b479f8ea7f09711dd735504e5ba4f937ca2243eed79ca08","sha512":"c1362e9f353251e39422b644d7505799b3ea07e211aaa19c589d52796731b30acabe903746b9a5aca5d114379084a4e24e81f3dee6c962f6e46465f5754d91f3","ssdeep":"","tlshash":"6c31c5e0efa18bf915198d329614f498d8ed1d99bf214aaf8b254016d5b10a8868eb3c","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-07-21T08:08:44.765411Z","times_seen":814,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":30,"connect":32,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.095Z","timestamp":1784546953095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ex-faucet.xyz/\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 11:29:13 GMT\r\nContent-Type: text/plain\r\nContent-Length: 20\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://ex-faucet.xyz\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Max-Age: 10\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, Sec-GPC, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Priority\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: private, immutable, max-age=10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":647,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":93,"send":0,"wait":98,"receive":0,"ssl":371},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JHGX1CL1QD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:08.829Z","timestamp":1784546948829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=G-JHGX1CL1QD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Jul 2026 11:29:08 GMT\r\nexpires: Mon, 20 Jul 2026 11:29:08 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166162\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":487030,"size_decoded":166766,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"991c64de0e7cc2dee9e375bbde311435","sha1":"b57f3f452a6de7735efba1594d8dc88603499fd9","sha256":"b56feb8d1b441e1eb6f2f60bf1a61934afdd361e08e5cbc6bd3e0a208b508fa5","sha512":"60bd18bc63f8f454c15d019851a0e9be62fe1d8737b74fdb1ecd767ee1012e56d55829ffde0e3e850fa804bef2bf32a10b1e8a37fd079f3c3c23d0616e8d42ef","ssdeep":"6144:3D+QrSWJxdsAvg/1vkBNcijVGTZk3TloDVwStc+Iq94N:T+sJDaBZwn+Iac","tlshash":"6da4f8cdb3d674265396f478903f018ba57b29e2b44cc899b189cce02e7469a8177f7c","first_seen":"2026-07-20T11:29:54.69603Z","last_seen":"2026-07-20T11:34:12.045287Z","times_seen":2,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":7,"connect":15,"send":0,"wait":37,"receive":46,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"klmmnd.com/v1/f8dadcbd-cc91-4197-bb3a-14887c2f23a4","fqdn":"klmmnd.com","domain":"klmmnd.com","tld":"com"},"ip":{"addr":"169.150.247.35","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.328Z","timestamp":1784546949328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"klmmnd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 00:15:28 GMT","end":"Sat, 26 Sep 2026 00:15:27 GMT"},"fingerprint":{"sha1":"34:58:3C:3C:A8:53:05:D7:55:25:B0:8C:8D:FE:EB:59:61:9A:EC:B8","sha256":"6E:9F:D4:E5:FB:88:3A:8A:A1:0A:A7:A1:30:11:18:48:F6:8B:A6:8C:1F:DC:E2:06:A3:D6:7D:16:F7:B2:8B:26"}}},"request":{"raw":"POST /v1/f8dadcbd-cc91-4197-bb3a-14887c2f23a4 HTTP/1.1\r\nHost: klmmnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 104\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":156,"data":"H°%Wëkß\u0010½$Ð\u0017½(‡\tå3Vì1Ñ\u0010°sØ\u0018æ#ÓEõ;ÀZæuÂ\u0000ås\u0016­\u0014Å\u0006ò`ŠVû—Dü~–\u0011÷oƒXë1Î^ÿeË\u0007«zÏ\tþ0ÐO¯i’Iæ7ËY°}ž\u000e®g‚Sø:˜Sª#‚"}},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\nserver: BunnyCDN-DE1-1078\r\ncdn-pullzone: 3663465\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 07/20/2026 11:29:09\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: a9bd120506f3ae888dbd3adf3f0cf9df\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1300,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":59,"connect":23,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re:2087/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.940Z","timestamp":1784546953940,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=x-user-defined\r\nReferer: https://ex-faucet.xyz/\r\nContent-Length: 3695\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockadsnot.com/bbvxvcgkbend?QbXwoAhL=BQOCAAAAAAAACZUAAsrbVgrWWt6bIOzjnJuNo3dJnvPEXkPpd54oWVSa7FUsuuokjNW9Ao6tPpx_07rcCiGPZjNWU9NTDC7w5zyQdzFCP80ZHHyIl93KjrjXPIYmQfBbqiWtkdllA8P65YAUH1W0t4KmD8n8lEsfE8U_C5nhPmHT4UYF7m3s4owjqTnmc865yNkuKO7WjUeUli3lRgF52j2Q9hzJN2skennnbt-F_E-pSO8HRke8GADBe-Z-BXWSfcmcy5GOGJMD5hp_uxDiy1cTk6iccExEzqa2uZll57d4qNpakbshCgvx1_ajescjJhvvpPQzAGJTzhGzl4ybSrfsFipCkxRio6i040VadTsUg3sCKys_AUDr7w4Vytb_vq8BlCGvrPggFE13Lp_rXDfPBdwJYUqxLwojZ7X2kNj8ZfH18vXA6aRJAbg091RqbkES5QBC2i8jBi-BdM7RTU0Tk4o63rjp7DxVGxRDU5kh8LzbVZgg29E0l9HkiM91yFb6srJnD6byDKQY9U-EwJV8kun1hgKPmS3eniwPa_c-qOA8eqmHdTEMJNmyDebVyr68XvqL_h5v7mvsRI3fVRItMms7FRDvKbc6sbIrRKueb5FYb09Ht6MJM2krXzWP5LsKqUmaS48k7-OMuDJretvXFNSJeyyhIlYJtZ8kjPOzV8gvzGzlA6bkDFtvgDB9pgpb-KyDE0Tp5qX_mnM6bDG8ljVDVz7oEp5np5t1tfL0A7pwNAx_4zAj10QE0gc116YdEH-SjB9VXggT2tpHCS1Uuh6e4X2fAnmZo9cs0ZemZnHtMy7-SgsNq_OywQH52eySfwurZYUISgEK-QUdxF6-CETj2vGZNaUNj9HR9yTnhzgRLJLrP90JWV2ACSVtyzgmHd0J2lKtkRCBGIXxWkag1GV2__8njiberFZxbURjEVKWITRGynPHB6bWPFJA6NablCzDFgbQWyoJeGkSZMxWvKNv7Lz1WZLx2bbKoDBtFmz4pmrSh-zTuOHJIBm8PZs-OM-gwqN1eue8MEvRPGVkxPV1wJ13J6YpWThlWX7QHuiCA4o2j4VLUytqIzi8dtO06onqKHBGn9ewivvFjzLH1O7nAv3uMpxyq1igd6vkIwYWVhKAo_5VVZa9JvA833ZVcLLn_04r8zXNagpcxunzav2VdIHh5wpWK3VpcabPQYrRr3Gn8RCpgtmm\u0026SuPQFGDp=4\u0026qLIYUVmQ=5247602\u0026ciGZrlNb=\u0026tUEYCOHx=0,0\u0026fQxKTlZp=\u0026OdqFDoRm=\u0026aiQmAyBj=1280,1024,1,1280,1024,0","fqdn":"blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"208.95.112.254","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:14.076Z","timestamp":1784546954076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockadsnot.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 02 May 2026 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:E5:21:45:6E:6C:CB:C5:89:90:48:97:86:D2:4A:6A:D6:56:13:41","sha256":"93:04:1E:D7:2A:ED:CB:B7:2B:10:A4:CF:08:96:46:7F:97:CA:95:0B:44:3F:D1:6F:97:BF:0E:CE:0F:66:B0:7C"}}},"request":{"raw":"GET /bbvxvcgkbend?QbXwoAhL=BQOCAAAAAAAACZUAAsrbVgrWWt6bIOzjnJuNo3dJnvPEXkPpd54oWVSa7FUsuuokjNW9Ao6tPpx_07rcCiGPZjNWU9NTDC7w5zyQdzFCP80ZHHyIl93KjrjXPIYmQfBbqiWtkdllA8P65YAUH1W0t4KmD8n8lEsfE8U_C5nhPmHT4UYF7m3s4owjqTnmc865yNkuKO7WjUeUli3lRgF52j2Q9hzJN2skennnbt-F_E-pSO8HRke8GADBe-Z-BXWSfcmcy5GOGJMD5hp_uxDiy1cTk6iccExEzqa2uZll57d4qNpakbshCgvx1_ajescjJhvvpPQzAGJTzhGzl4ybSrfsFipCkxRio6i040VadTsUg3sCKys_AUDr7w4Vytb_vq8BlCGvrPggFE13Lp_rXDfPBdwJYUqxLwojZ7X2kNj8ZfH18vXA6aRJAbg091RqbkES5QBC2i8jBi-BdM7RTU0Tk4o63rjp7DxVGxRDU5kh8LzbVZgg29E0l9HkiM91yFb6srJnD6byDKQY9U-EwJV8kun1hgKPmS3eniwPa_c-qOA8eqmHdTEMJNmyDebVyr68XvqL_h5v7mvsRI3fVRItMms7FRDvKbc6sbIrRKueb5FYb09Ht6MJM2krXzWP5LsKqUmaS48k7-OMuDJretvXFNSJeyyhIlYJtZ8kjPOzV8gvzGzlA6bkDFtvgDB9pgpb-KyDE0Tp5qX_mnM6bDG8ljVDVz7oEp5np5t1tfL0A7pwNAx_4zAj10QE0gc116YdEH-SjB9VXggT2tpHCS1Uuh6e4X2fAnmZo9cs0ZemZnHtMy7-SgsNq_OywQH52eySfwurZYUISgEK-QUdxF6-CETj2vGZNaUNj9HR9yTnhzgRLJLrP90JWV2ACSVtyzgmHd0J2lKtkRCBGIXxWkag1GV2__8njiberFZxbURjEVKWITRGynPHB6bWPFJA6NablCzDFgbQWyoJeGkSZMxWvKNv7Lz1WZLx2bbKoDBtFmz4pmrSh-zTuOHJIBm8PZs-OM-gwqN1eue8MEvRPGVkxPV1wJ13J6YpWThlWX7QHuiCA4o2j4VLUytqIzi8dtO06onqKHBGn9ewivvFjzLH1O7nAv3uMpxyq1igd6vkIwYWVhKAo_5VVZa9JvA833ZVcLLn_04r8zXNagpcxunzav2VdIHh5wpWK3VpcabPQYrRr3Gn8RCpgtmm\u0026SuPQFGDp=4\u0026qLIYUVmQ=5247602\u0026ciGZrlNb=\u0026tUEYCOHx=0,0\u0026fQxKTlZp=\u0026OdqFDoRm=\u0026aiQmAyBj=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: blockadsnot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:14 GMT\r\ncontent-type: application/javascript\r\ncache-control: private, no-store, no-cache, no-transform\r\nx-popads-ec: BotDetectedException-2-147\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":49,"size_decoded":258,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"429445838231a8669323ba64a7a985b5","sha1":"25022e4d4b0cbd807439b15752da081ad5fc7735","sha256":"629abcd488cb15c5e4eca6368ed6972584a56d2e975db04e4b9f406737d7d1c0","sha512":"68cfa7013d9c1da3b4bdd130af56ea6451d564f22923c1773828297a92ec8ad46d7630b8934802c4bec47a24094b2d029eccf4c0ac398e19f9ead39e83c62a19","ssdeep":"","tlshash":"bb900254692820211dd4757169432aad512b2200561911359245a00a2400496570a2a4","first_seen":"2026-07-20T11:29:54.697375Z","last_seen":"2026-07-20T11:29:54.697375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":92,"send":0,"wait":100,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/74.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.402Z","timestamp":1784546949402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/74.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1513\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Fri, 14 May 2021 01:41:04 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 08:05:07 GMT\r\netag: \"ad8faf0475a17ef069e1d7536e44a561\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 31698\r\nx-amz-cf-id: g0dAyybLBDqXTtIhj8BdDpYSvaiTd48aj-TGeAlYtA4n72TkTWN5mg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1513,"size_decoded":2009,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ad8faf0475a17ef069e1d7536e44a561","sha1":"eeb366c51cd2e47d736e2b392cef82a9b4b5a34b","sha256":"89d53a240127fb371f01855b2ca02c0fc46f4f9be520229eb414b1ed1f3489af","sha512":"de6e0f423794a09ff56af8c0e355ff91d75e52c8d37dbffd405fa37c63fd1f4d3b6f143294ce452afa74ccf920687620689431d5f55d6bc3fd96bfdb9884fa97","ssdeep":"","tlshash":"9b31dac697517e13d23ea513a5108139a8132c42db18ae4c1e3accec3b108be54047a3","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-07-20T11:34:12.066591Z","times_seen":242,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":11,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/825.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.420Z","timestamp":1784546949420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/825.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 314\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Fri, 28 Jul 2023 07:44:51 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Jul 2026 05:55:45 GMT\r\netag: \"da33d4dc1767175abecee422b56d7678\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 67f9655de5330e95e25b0cf3ebeeccb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 20056\r\nx-amz-cf-id: Muwg_-82NVBd2FbqiSzAW28JhJCFrxlXUCA8Io614ATQroa7IW4z3Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":847,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"da33d4dc1767175abecee422b56d7678","sha1":"0e525d1e7616980449f0f2617ddb65bc77e3f064","sha256":"357122652b497822a01833fc055edad08ac0c7db2f1069e4e3efb9cd9fbe0beb","sha512":"3cdd0ac2f64ecbd5c2051181fbb4fa3506566bdb822edd7c6eb4bfcbb843e2997fe211405777be8038e6ebd50878e38a8ac1961defc5876f159f04c9bd22f849","ssdeep":"","tlshash":"02e07d507a4052fec9327b76dc22032b745b1cc399b0502f19a09466eb624e193c6955","first_seen":"2023-07-28T23:49:01Z","last_seen":"2026-07-21T08:08:44.785056Z","times_seen":774,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onclckmetrics.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI3NjAzNTc4MzgyMjM3MDgyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNTUuMCIsInRhZ19pZCI6Mzg3NTUzLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMzQsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"onclckmetrics.com","domain":"onclckmetrics.com","tld":"com"},"ip":{"addr":"138.201.236.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:09.614Z","timestamp":1784546949614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Jun 2026 05:25:34 GMT","end":"Thu, 03 Sep 2026 05:25:33 GMT"},"fingerprint":{"sha1":"23:AB:73:0B:11:E4:AB:98:B9:53:4E:69:8C:EA:72:99:16:3A:88:0A","sha256":"37:8E:90:59:03:51:36:DB:83:83:0A:00:42:87:D1:5D:4B:C7:9E:E2:8A:13:B1:C8:34:51:0C:3A:CE:BC:49:6A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI3NjAzNTc4MzgyMjM3MDgyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNTUuMCIsInRhZ19pZCI6Mzg3NTUzLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMzQsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: onclckmetrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ex-faucet.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 20 Jul 2026 11:29:09 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":313,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":31,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckpop.com/get/","fqdn":"bid.onclckpop.com","domain":"onclckpop.com","tld":"com"},"ip":{"addr":"94.130.197.240","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:10.195Z","timestamp":1784546950195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder-base.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 01:57:34 GMT","end":"Sun, 02 Aug 2026 01:57:33 GMT"},"fingerprint":{"sha1":"4E:D7:0D:E0:98:58:BD:3E:6E:73:AE:69:8F:A1:E8:6D:2A:49:FE:6F","sha256":"AC:5F:AC:7C:CB:A8:F6:6F:46:21:62:42:4A:2C:B3:A7:04:5B:5D:1C:84:E9:43:2C:81:BE:DE:53:17:D5:5D:EB"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: bid.onclckpop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ex-faucet.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1860\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1860,"data":"{\"imp\":[{\"secure\":1,\"ext\":{\"user_keywords\":\"\",\"tag_ab\":\"d\",\"id\":2612,\"spaceid\":2612,\"type\":\"pop\",\"subid\":\"1400604364\",\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"spot_id\":6096702,\"labels\":\"4,5,6,7,8,9,46,47,54,55,61,109,4,5,6,7,8,9,46,47,54,55,61,109\",\"blocked_verticals\":\"4,5,6,7,8,9,46,47,54,55,61,109,4,5,6,7,8,9,46,47,54,55,61,109\",\"allowed_labels\":\"\",\"ad_tags\":\"PEPE%2CZone%2CCrypto%2CZone\",\"refdomain\":\"\",\"is_iframe\":false,\"gyr\":0,\"features\":\"\",\"accel\":0,\"ssp\":3758,\"rchange\":false,\"otype\":2,\"stratagem\":\"\",\"v2_track\":0,\"cla\":0,\"v2\":0,\"mn\":0,\"timezone_olson\":\"UTC\",\"event_id\":\"90c9c494-b3c4-47f1-82f4-5ae0dbc513a7\",\"testab\":0,\"approved_mainstream\":0,\"ver\":\"1.172.5\"},\"pext\":{\"ab\":0},\"metrics\":{\"sp_scr\":0,\"intes\":[],\"high_fr_clicks\":false,\"dev_cons_act\":false,\"scroll_percent\":0,\"empty_clicks\":0,\"prev_step_diff\":505,\"act_su\":1,\"izb\":\"0\"}}],\"site\":{\"id\":\"6096702\",\"cat\":[\"IAB13\"],\"page\":\"https%3A//ex-faucet.xyz/\"},\"device\":{\"w\":1280,\"h\":1024},\"user\":{\"id\":\"b20e8c4bd7ff0dffab5d2134d0f8f1d8\",\"fp\":null,\"fp_str\":\"\",\"ua_data\":null,\"interest_ids\":[],\"is_webview\":false,\"is_inapp\":false,\"social_network\":\"\",\"device_specs\":{\"brand\":\"\",\"gpu_brand\":\"\",\"gpu_version\":\"\",\"os_name\":\"Windows\",\"cpu_cores\":8,\"device_memory\":0,\"width\":1024,\"height\":1280}},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Linux x86_64\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":8,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"ext\":{\"dt\":1784546950191}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 20 Jul 2026 11:29:10 GMT\r\ncontent-type: application/json\r\ncontent-length: 5583\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11235,"size_decoded":5953,"mime_type":"application/json","magic":"JSON text data","md5":"040b7bbc81e24ab2df036a3a00e87682","sha1":"27e51e9f629e882877261f30e683c480b28d2ba3","sha256":"f6e8d7d66da4ed630f2775b485fdc45eb1098324bf93725dc6ebe0e755315e13","sha512":"1bdb2720837469708f9bc9085962536e7abac86159ca8bd5c92c48abb172db2bc6d1e991b07b82fddb43a726896b9cc434ad01c015c0ef41f32c096bdd5ac69b","ssdeep":"192:1vl7bJP2oxxWtK7bJ4q7p7bJapyIjtr6BBP7+l3I1vtaFvl7bJP2LxWtxpyIjtrk:1vtJDxouJ48JantrwBz+RslGvtJyovni","tlshash":"2d325d522da3fc7164fc4883f1a6b2746fd6e6b218931ed6c67b45aa848e34051c6f1c","first_seen":"2026-07-20T11:29:54.700031Z","last_seen":"2026-07-20T11:29:54.700031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":37,"connect":30,"send":0,"wait":191,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ex-faucet.xyz/","date":"2026-07-20T11:29:13.103Z","timestamp":1784546953103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ex-faucet.xyz/\r\nOrigin: https://ex-faucet.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 11:29:13 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 47\r\naccess-control-allow-origin: https://ex-faucet.xyz\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a1e1a078ffa73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":496,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"97371a5b7684a7bb03d958acf3a754bd","sha1":"991b887a41c68808cd504973b45b875f990d0acb","sha256":"6d1001ef2cf194e51f89ad368630ac52a4de7b07f7c02dc90dfc7423cf6fcf9e","sha512":"8013f34e400b5a94353e84bce21d34e591633083c427d346fdcf17c5474431f83c4a17047aefcaa97364424ef44ab6e57b27bc2dc60d997e69aa941ef8caa058","ssdeep":"","tlshash":"8290024511a42f1585e24645518144109266438261c2aa14c75e71b65881241d062664","first_seen":"2025-12-19T23:45:08.346815Z","last_seen":"2026-07-21T20:31:58.11798Z","times_seen":1362,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}