{"report_id":"b09fdf7e-70af-44d0-8d87-904647bd3b39","version":6,"status":"done","tags":[],"date":"2026-04-06T13:18:48Z","url":{"schema":"http","addr":"h5.xauulive.com","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"104.21.49.119","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"title":"LBMA","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.xauulive.com","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"104.21.49.119","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T13:18:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":20,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36250,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.089823+0000\",\"flow_id\":2017654078883233,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36250,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-04-06T13:18:30.574881+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36276,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.111889+0000\",\"flow_id\":1438597998109397,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36276,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.582357+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36298,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.113952+0000\",\"flow_id\":1888044850806649,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36298,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.589689+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36254,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.132852+0000\",\"flow_id\":2186892970217975,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36254,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.578039+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36270,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.149605+0000\",\"flow_id\":1252857842425244,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36270,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.581020+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":33684,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.151306+0000\",\"flow_id\":1563371092969046,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":33684,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":906,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:30.591446+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":33686,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.166354+0000\",\"flow_id\":636134898404546,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":33686,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:30.593090+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36288,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.171343+0000\",\"flow_id\":1863920019503481,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36288,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":902,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:30.588153+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":33690,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.231295+0000\",\"flow_id\":939617287562003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":33690,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:30.680723+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":36566,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.277699+0000\",\"flow_id\":1464685629426697,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36566,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"lbma.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:18:30.609289+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36310,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.349810+0000\",\"flow_id\":210426329996063,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36310,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-06T13:18:30.826143+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36330,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.364496+0000\",\"flow_id\":1279216056712454,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36330,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.834822+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36344,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.388406+0000\",\"flow_id\":98473712471791,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36344,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.839407+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36322,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.390579+0000\",\"flow_id\":1475672155792916,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36322,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:18:30.828948+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":33706,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.390382+0000\",\"flow_id\":728472400354601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":33706,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":906,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:30.843049+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":33716,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.403462+0000\",\"flow_id\":547735881573028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":33716,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:30.844452+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36324,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.408466+0000\",\"flow_id\":1778102277946510,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36324,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":902,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:30.834702+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":36354,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.409076+0000\",\"flow_id\":1774653419214575,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36354,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":902,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:30.841455+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":33724,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.495470+0000\",\"flow_id\":2013015514166256,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":33724,\"dest_ip\":\"149.129.12.130\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"perpcoin.oss-ap-northeast-2.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-04-06T13:18:30.930800+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:18:31Z","timestamp":1775481511,"ip_dst":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":36582,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:18:31.563081+0000\",\"flow_id\":2089534651536938,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36582,\"dest_ip\":\"47.79.48.185\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"lbma.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":902,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:18:30.890410+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-02-27T23:24:20.766281Z","last_seen":"2026-04-06T13:04:16.038604Z","alert_count":0,"request_count":3,"received_data":10503,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"h5.xauulive.com","ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":36,"received_data":3660448,"sent_data":16671,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webapi.elbmalive.com","ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-02-27T23:24:20.784079Z","last_seen":"2026-04-06T13:04:15.935841Z","alert_count":0,"request_count":25,"received_data":75817,"sent_data":12860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"echores.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.615446Z","last_seen":"2026-04-06T13:04:16.35349Z","alert_count":0,"request_count":9,"received_data":14277,"sent_data":4257,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"lbma.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-04-06T13:04:15.313262Z","last_seen":"2026-04-06T13:04:15.313262Z","alert_count":0,"request_count":1,"received_data":2378,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.xauulive.com/charting_library/charting_library.min.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-07T11:52:08.976668Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87af3f0ea62b2d9814e0f57c40ba04d8","sha1":"318e157fcc04da4a988b417915da0afc281ad107","sha256":"57138fba899573beb886392045eecc27249420aa6a952e04f47992ac68deba46","sha512":"37da0bfd2aee5f5c3644be1f54786d68d22d5c77fbd53ab603c065628dd92aa6737de84165e157da88b30c387ee51eab8ccea856e7ea206cabee3b9762b441a1","ssdeep":"","tlshash":"3911abfe291a602a6303404e976b7801643250a9000a184277ccde9dbb9abbdd0cfb8c","size":1048,"data":"","first_seen":"2026-04-06T13:04:20.065598Z","last_seen":"2026-04-06T13:51:20.458039Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-07T11:52:46.157686Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-07T11:52:09.028476Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-07T11:52:09.014316Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/config.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67ff8a6aea8b026a686a55acabdaa518","sha1":"4a15b427024362562506bc25e32ff4366f62039f","sha256":"3199afa5d09d297658323a19b1ec939756856b700c9bb6aeb46687aa505ebfc1","sha512":"969bedd269b1bad6dac4746692b67c3a0ad79ddd36c1db6dc79e3f1f1d25ae9a8575d9f7f7b2c15b9d5070a7020ba60c19350dec7073a7a24252bc8869b2cb6d","ssdeep":"","tlshash":"16b0923d7b66090226a302806a7b774ca2d0e43dc8488c44c2929842a8464a3f0a68ac","size":119,"data":"","first_seen":"2026-02-27T23:24:31.722069Z","last_seen":"2026-04-06T13:51:20.345416Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95e9b9fe4a48a707caf0875eccbb589e","sha1":"ee6903d8a5a929998d0e40d8489491e50b86cc3b","sha256":"4bf52dfa47c901d7749924632ce33d2d65f36a51f36a3caf6bd8aca84e6a0e0a","sha512":"5958d0f5489c64db69bf5b392b14fb0c780865051956a2f453c27f65ff3a7f04006d7a1ba42e20cb8b36787c9f6ade123c0747d1c7a8fa07e0c090ea66a5d3e9","ssdeep":"","tlshash":"bb90045403004450c15331d01dd153503c14500134c5500d53dc01c03d04403dcd0551","size":39,"data":"","first_seen":"2026-02-27T23:24:31.768922Z","last_seen":"2026-04-06T13:51:20.491761Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-07T11:52:09.021327Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-fa7545ff.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c486f065d4d4026e33553aa8dd3445e","sha1":"14663adfc4c17c5ad7863834df5799589d4d9911","sha256":"a5cf0fb952d8ba6def92dbe11deaa9a034ab1d26c2262db8519aded435246f50","sha512":"e7fef816e0744d9170aac60c169b646a2e66ebab75127e037e6041895eafe4c444bbeb96aaf0c45eca6d6ac1be2027cc6f8cbee6655887220d5a87ba9a43bad0","ssdeep":"1536:BNa2v2A3wBDtnrzXghQWUgAhahBStudHR9hbF:e1A3wB2hQWUgAhahBRrbF","tlshash":"afb34c89650a0eff1cfe0994b98b5550306d1f93988ccca3b77b6e4927facd5224a71c","size":112804,"data":"","first_seen":"2026-04-06T13:04:20.033779Z","last_seen":"2026-04-06T13:51:20.343311Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-1cbc66ab.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ef47732d9a3b23b2df705bf99004bd8e","sha1":"b3f5485a08e2b55394ff7d0b9a7e28b62031f0ff","sha256":"c856cb58e112026bd37495a4599a5d51026fdee8020dedd9d36d61129f427516","sha512":"466992c359743440ba217f8a4563f19510cad057a5745338c08c3b3869b1be0ff6a09b5d262f7d4d7d5bcd9cfdf049ff902326a92e95620fba85d2cb8a759764","ssdeep":"96:c2LYsH+P9YBqD+wMALTcT/3b+JcQ9Su3tKZ3hvK+3YmUeAIM8jx:c2LYsH+1YBqiwZU/3bMe5hv5keAMx","tlshash":"de91b78cf8028a7d9ab7985048580421359c3bf6b10848f1f6be9d5e63b8a7ae791725","size":4618,"data":"","first_seen":"2026-04-06T13:04:20.011595Z","last_seen":"2026-04-06T13:51:20.373201Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-c8685e2f.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6501efe5b6257c064df86dc83764acc3","sha1":"7ccfa4c5c1c693c133cbfe05dd90d9ac498401ca","sha256":"9a1166a4d04c57a14bd4583435aae7fc38b281cb0c9ddc1d78f5ebd98d75c150","sha512":"a5a16c46bddc294b62b91dc88607b2773372f3df43759c90d51c1cff26713c088311f42666fd526eeef21b1787d43caa28a1f54aba5fe01e59cbd52e843a0a5d","ssdeep":"","tlshash":"6d01fdf8fc0c8ebb0ea20a400290360014091fddfa1419f198867d661be4940d7de32e","size":776,"data":"","first_seen":"2026-02-27T23:24:31.6241Z","last_seen":"2026-04-06T13:51:20.376273Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-04-07T11:52:09.022346Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-bf4d5967.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb207d8fb848b9b1d3c9e4e6b4298681","sha1":"31c1667c9b8ceef8ebb64ec27be92dc1f3a8fb42","sha256":"3a25b890f053f9407bd2c192760880dd0ad9a5a5f57b1a78a32841ab6e088a18","sha512":"fc1eed0d7fce6fb42d77347aba7108fe08df1b60a5a3f8e6f1c96247f3121f21c0809d6ccac36dc568bc955d0ff3d10dc5bd0d72f0fc0afb40cd98c77280ac5c","ssdeep":"384:RHCKOobN0qbi3/PfPnHdl2ZFjJZQnPDfqoATZss+4p4JeJ36WoSebhdlcYCLiI:05Rwc3XL27nwDfqB2VVhdlcYCLl","tlshash":"8c62e8aaf5079a3df2bff05140880050b62d7fea5009c8f1b9bcad466752ee8b395719","size":14793,"data":"","first_seen":"2026-04-06T13:04:20.032489Z","last_seen":"2026-04-06T13:51:20.386868Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75cb7f06acf415e182c5d292e0dff7bf","sha1":"e74673ad827ed6ee53d1339a8075e55c2308a7e1","sha256":"8fe5af54708e590f593671f7709c46a0bbf79ad1c2dd9f0a7927d42a84f0d530","sha512":"50b19638c5a3e55d436921e1a737f216e2e0a314fb77e55f89eb84cf833aff299d7ea9959586ddec2ded2462921ea1de03b9d2bc320da42ac208832b922d8f6d","ssdeep":"","tlshash":"c6d0a7110c78f4714252f84a0533c599334135d77404f4063ddcd8540fa4bfc0e92d6c","size":252,"data":"","first_seen":"2026-02-27T23:24:31.780135Z","last_seen":"2026-04-06T13:51:20.501092Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-07T11:52:09.00792Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/filters-57934bea.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a619469c892663d16e52217c541c1a04","sha1":"387cd10ae6c0237a80a131840e635d8f82577a3c","sha256":"a6b8b67653ef725392bc0090c0297dbacf6851f23046eeded378a5adeb76a6e5","sha512":"83bda9bd9964979c5c31ec6db2a3a38ac20e3326b70e404813fb1dbed69dc7cf2c022993e33aa329911f25029fb63124cf365dbb1434834ff5ab276d2aa620b3","ssdeep":"","tlshash":"ab5124fdfcd7613356ee6ef941288454728eae20686e0a4df54bd0455933888e07f768","size":3102,"data":"","first_seen":"2026-04-06T13:04:20.018757Z","last_seen":"2026-04-06T13:51:20.335356Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/currencyItem-a1c29b29.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d606b704cfd63cf18de83c32651a3067","sha1":"7c47aabdf35c96ee849c3ea6f372aacd9cd102ab","sha256":"bb4ae26269807983deb56d849a88ce4e659b0c70ea5e83fa00a9de7c41aa7840","sha512":"8c3955048459618032252e56af18372fa63e4f76bba34e521c30f0690423de7863f3498e0183821d5f07263a12ef061b71af0e2b082918635bac9b55b20a2352","ssdeep":"","tlshash":"a421ca9aaa01c7b1cbbe91a2c5bd0414120d7bda700185c1ebed148a3b9a5fcd728a31","size":1206,"data":"","first_seen":"2026-04-06T13:04:20.047228Z","last_seen":"2026-04-06T13:51:20.395115Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-04-07T11:52:09.013302Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-07T11:52:46.15494Z","times_seen":565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-04-07T11:52:46.156024Z","times_seen":693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-04-06T18:33:03.805198Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-04-08T00:11:23.200034Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-07T11:52:09.011074Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-07T11:52:46.151543Z","times_seen":2987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/en-ee0598f1.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"909fc2f10a61e1389a9f595c223a1283","sha1":"fda5d74a74b93193e6cdb4c9996ffbed478957ea","sha256":"c8c530ae968dcf0018fb7c207507a9342518421344cdd4a346341de273500e9c","sha512":"5816141166ec20e1126e78d9df95e3f4fbd9c3e877e83acd8fac2a1ca67810cc49b5ec57c55785af59c59a42f66468ff528f2bba25b06f768f7b4c4c8cb353cb","ssdeep":"768:5CA4tZcEw/o7rKOdAFsifnAMC2rAaAMR6VoP6+6sPG9w1mwO6fpk7aOLxO:5CSponKOdebE2rdUVLsPWwqLxO","tlshash":"3d13f7893e1a989a04f3536774ce2e1160f60ac18255881f4fecc9fd53e2b67a367b34","size":42102,"data":"","first_seen":"2026-02-27T23:24:31.734965Z","last_seen":"2026-04-06T13:51:20.371548Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-08T01:35:12.56374Z","times_seen":4511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-07T11:52:46.161956Z","times_seen":929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-08T00:25:30.045606Z","times_seen":30124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-08T00:25:30.046606Z","times_seen":33906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/vendor-eb88f680.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"93e6de8cbbc1c3bfa6342405523a6f7b","sha1":"6bbf40819fcfda783ded60ba027423651fced963","sha256":"7eb512d7a7e756d927219e74c0534e711bf437d5185f3f37565bf68f0d8ac2d4","sha512":"a2cea3f865229554761f1016e0e33a737512990369d772ee1771361e4459a1bfd5db3648904dd456072007b8d9c1e01e67426de26e0a1b4ae026a0872479053c","ssdeep":"12288:b/4JoiQ754+28vbUw6+wWAcWoqrbR0JUd/WIh/mL0uZRWx9r:b/4Ay58L6+wW/WoglZd/WIh/mL0jR","tlshash":"0b1539c97292f06147ab24e240bb0006f3396e59740e84a4f16dd9db7d7ad89e277f38","size":931293,"data":"","first_seen":"2026-02-27T23:24:31.743909Z","last_seen":"2026-04-06T13:51:20.365074Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-07T11:52:46.161443Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-9d36bf28.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f5b8dc34f4cb809f12a5b70fa7fcd8f9","sha1":"ffe9cb814a67e8bb349a20fc7af82346aa7228ee","sha256":"ccdd64755c50e718dfcaca6bfbd97209a5520f9bfc2ebaa5ca01d5a9689ed28f","sha512":"635afbcce4843fbf84785a2567e5f6df39d4f53d62ff7360a6ebc5e8c98f52fa8052a28691a98e67e3ed2f1d0662ca45f9718ec70b521f7d976231b53114964c","ssdeep":"","tlshash":"dff00e7f7d6a80b21bf788e8a2631820b61c1f4a3754c4e4d4870e10db388e7d12e218","size":510,"data":"","first_seen":"2026-04-06T13:04:20.052382Z","last_seen":"2026-04-06T13:51:20.394298Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-04-07T11:52:09.016148Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4a9d973d1e30085a9546cf6ee49cb488","sha1":"4a80a253e1d2d07b6dede9f69fbd4c2fd3363d20","sha256":"e24c2a1b6b6bdd7e72cf4f795a489b668359a0164e0200e5e6d49fcbb543797a","sha512":"8cb6f53571ce6c05e19a35476bf05b79f1336787b04aeeaf13afa8839dc5584efa86088875fd19d9f6163e6a676accf1a0fa3481475378f6d594b9425b4b4462","ssdeep":"","tlshash":"05c08cc9a0c36d002602641010af38e49024402770881b028ca4d8482e220b08233e98","size":141,"data":"","first_seen":"2023-05-08T19:42:57Z","last_seen":"2026-04-07T23:58:42.209758Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-07T11:52:09.025059Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c4b63197790d25a07f25a43bd99b082","sha1":"9cf651883e08001a9ec271a0c3c2d4ba8cbfda2d","sha256":"cab5094ca7bb9e74a1d0753500ab633f54ee468f574b0c71293e95e0eeb863b6","sha512":"019ba7e344e3b8e2fb0b9b422fc54931b8f5650f519c8532a13b38b604c7761110390b28f6531300602e1e130ef426834d9ce94baa0654db26da7edfbba9b19e","ssdeep":"","tlshash":"5dc08cc4a0c23d101a02641020ef24e8a024806a70881b028c94d8482e230f08233ed8","size":140,"data":"","first_seen":"2023-06-19T06:03:31Z","last_seen":"2026-04-07T17:40:36.870949Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/#/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-07T11:52:09.00541Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"perpcoin.oss-ap-northeast-2.aliyuncs.com/echo2.043913a2152a24663a0d4ff51883bac6e.jpeg?2.0.1774953446696","fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /echo2.043913a2152a24663a0d4ff51883bac6e.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: perpcoin.oss-ap-northeast-2.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A79303073436F3425E\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Mon, 17 Mar 2025 07:36:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-04-06T13:51:20.364293Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":291,"send":0,"wait":277,"receive":0,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-fa7545ff.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:26.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-fa7545ff.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-1b8a4\"\r\nexpires: Tue, 07 Apr 2026 01:18:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OASoNgQwkeqBR0rMaIvM9cYDqsL4tXVXgDVCr2uHunUVCozGegqPg9Qu1nBQqzQUPutsIFF8qQcTo3o4z%2Fm3zqivvPwP8AM1JPnLz3p%2BYo%2B%2F7KMOyIEy2TZ6D9J3%2Fx8A7b0%3D\"}]}\r\ncf-ray: 9e8114174f0856b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"8c486f065d4d4026e33553aa8dd3445e","sha1":"14663adfc4c17c5ad7863834df5799589d4d9911","sha256":"a5cf0fb952d8ba6def92dbe11deaa9a034ab1d26c2262db8519aded435246f50","sha512":"e7fef816e0744d9170aac60c169b646a2e66ebab75127e037e6041895eafe4c444bbeb96aaf0c45eca6d6ac1be2027cc6f8cbee6655887220d5a87ba9a43bad0","ssdeep":"1536:BNa2v2A3wBDtnrzXghQWUgAhahBStudHR9hbF:e1A3wB2hQWUgAhahBRrbF","tlshash":"afb34c89650a0eff1cfe0994b98b5550306d1f93988ccca3b77b6e4927facd5224a71c","first_seen":"2026-04-06T13:04:20.033779Z","last_seen":"2026-04-06T13:51:20.343311Z","times_seen":10,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getCoinList","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRL%2F29wygncjxFVkl%2Fj9HWEUzu2cw4O3GEYgp8J9lFlHTAGfsknmoL67BEvQ3ZbOdlp%2BNkvWhsFzLfD5lFoPHZ9S8U%2FZ2b1pesmQtn2iAd4TNCRmKNDoiuwkSUKxCrjagoIPjK9D8g%3D%3D\"}]}\r\ncf-ray: 9e811427bb34783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":36,"dns":1,"connect":3,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-1cbc66ab.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-1cbc66ab.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-120a\"\r\nset-cookie: server_name_session=5d96723f3ffaf3e6f7825f8bee37801d; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mN3O0q1RnejbWfRdivmV77Q97Mjt%2BE9S8vDByY3OMqD7dIR%2FOj1AiXpUMGr6dqp8ZtRC4Q%2Frr%2BvibNI45c2p2KDyfVjRAVDVDGMV2QoPwjG0SFLn4sCDgP7nd%2Bn7xN6eW%2B8%3D\"}]}\r\ncf-ray: 9e811427dfcd56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4615)","md5":"ef47732d9a3b23b2df705bf99004bd8e","sha1":"b3f5485a08e2b55394ff7d0b9a7e28b62031f0ff","sha256":"c856cb58e112026bd37495a4599a5d51026fdee8020dedd9d36d61129f427516","sha512":"466992c359743440ba217f8a4563f19510cad057a5745338c08c3b3869b1be0ff6a09b5d262f7d4d7d5bcd9cfdf049ff902326a92e95620fba85d2cb8a759764","ssdeep":"96:c2LYsH+P9YBqD+wMALTcT/3b+JcQ9Su3tKZ3hvK+3YmUeAIM8jx:c2LYsH+1YBqiwZU/3bMe5hv5keAMx","tlshash":"de91b78cf8028a7d9ab7985048580421359c3bf6b10848f1f6be9d5e63b8a7ae791725","first_seen":"2026-04-06T13:04:20.011595Z","last_seen":"2026-04-06T13:51:20.373201Z","times_seen":10,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhNYKTsawCpRoKPnKM94%2FIBXz19JNzlJl8cuw4nzuRYHT7q2NpjYi4LLkQvQ%2BdQ5pZlcQKjaUnMyDIR0SiYfvSMhs%2BOQz%2BglDdZO%2BQmAaKg2xmceddbL8jIJ08SdGs1mst%2FHY1soUg%3D%3D\"}]}\r\ncf-ray: 9e81142edd9a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6640c546955e7fe084abf059a7032729","sha1":"f313cc31748f2f888a4c17bf6b3cb68861509f38","sha256":"bfb0e1ed2c1515e5b05d153c6699be960e3c0edd9a1f71c0fb757e7e50b7e746","sha512":"64a47abf3b78a8e098939c32ae28fe8a67edd821060dc17bbf102dd4175d1075b8a6a21a93889070020b423901fb747979ad326e536b4f9ce4b3c85db0b8cc07","ssdeep":"","tlshash":"109002555d1c8242a8c300a5a90a1208002431602666928d4c59a12a80c81b2314489c","first_seen":"2026-04-06T13:18:59.066895Z","last_seen":"2026-04-06T13:18:59.066895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/svg/light/mengbanzu13.svg?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6542f5dc-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3NsJinbQj407Rn9qTyb1%2Fr2kuuDwOht0lBbpDow4zWZLtjAB%2BoQowuzH2X7dt42d6Wx8s0DatXkL8UJ5vyG5QiWVpg4hsahsyEF6NXbUUYngH%2BmvSYUEjuJ2C7knVapC%2FA%3D\"}]}\r\ncf-ray: 9e811431584056b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-04-06T13:51:48.542536Z","times_seen":202,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qGSZop0xpa363%2FbvLWWkqGN9iia646%2BhrLp7%2Fc59%2Bu86c2v4sI03lJjaZGyDA7Zwv%2FsTaxNKji5bzXx2iFlzkYxHFBC159jl%2Fj26tObD3SXpBtboV1nPvnNwyVtZN4umGW5NMIfFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811431edd45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-9d36bf28.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-9d36bf28.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BE%2FwO3q63x9IYGWTmS0uiSmkLamuij2UPzyEW0gtgL9kZXibXqZC%2FNqLVSwBOj%2Bxme7efflV%2BPEWie3O%2B0bGClMP3%2BcigSODztjSvxukHyQKJp4COa%2BK1HERdMZiQPiZpZo%3D\"}]}\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=1f649e37a0433aac60ed603692ea3f3e; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69cc4ca6-1fe\"\r\ncf-ray: 9e811427dfcf56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"f5b8dc34f4cb809f12a5b70fa7fcd8f9","sha1":"ffe9cb814a67e8bb349a20fc7af82346aa7228ee","sha256":"ccdd64755c50e718dfcaca6bfbd97209a5520f9bfc2ebaa5ca01d5a9689ed28f","sha512":"635afbcce4843fbf84785a2567e5f6df39d4f53d62ff7360a6ebc5e8c98f52fa8052a28691a98e67e3ed2f1d0662ca45f9718ec70b521f7d976231b53114964c","ssdeep":"","tlshash":"dff00e7f7d6a80b21bf788e8a2631820b61c1f4a3754c4e4d4870e10db388e7d12e218","first_seen":"2026-04-06T13:04:20.052382Z","last_seen":"2026-04-06T13:51:20.394298Z","times_seen":10,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/filters-57934bea.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/filters-57934bea.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-c1e\"\r\nset-cookie: server_name_session=d24a4964b634da4bc26be0ce523d79df; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xor6tN4KFHxD2y1R2pxp0tPX8ZXzs01wbAG8zEALWQdTjd4KzpG83fiSXHudClEgbT9jQwBaTMImAobx5oPTV35pLNsnLr9cdG%2F8A16xxzVEGx6%2F6Tp9Omc1rcniwWYrhUQ%3D\"}]}\r\ncf-ray: 9e811427dfd056b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"a619469c892663d16e52217c541c1a04","sha1":"387cd10ae6c0237a80a131840e635d8f82577a3c","sha256":"a6b8b67653ef725392bc0090c0297dbacf6851f23046eeded378a5adeb76a6e5","sha512":"83bda9bd9964979c5c31ec6db2a3a38ac20e3326b70e404813fb1dbed69dc7cf2c022993e33aa329911f25029fb63124cf365dbb1434834ff5ab276d2aa620b3","ssdeep":"","tlshash":"ab5124fdfcd7613356ee6ef941288454728eae20686e0a4df54bd0455933888e07f768","first_seen":"2026-04-06T13:04:20.018757Z","last_seen":"2026-04-06T13:51:20.335356Z","times_seen":10,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 614\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7794D1033381151D5\r\nAccept-Ranges: bytes\r\nETag: \"288529B0E33D3B66A2731D058A0EDB26\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12140603420238383984\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KIUpsOM9O2aicx0Fig7bJg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.383169Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1848,"timings":{"blocked":792,"dns":6,"connect":260,"send":0,"wait":263,"receive":0,"ssl":524},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:31.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAl3Kai2OjsdSczGF6oWJ5kaxZWy48kgkq43NxVTWRz7V2bl5XogBg%2Bby%2F%2BUDWv05Ar01OvdszwlwY95xfFRLTJepyw%2FGEKXpE4k%2BHR35OIQIfLcxsCUOSbbk0TJBN6MbXf%2B%2FhLCDQ%3D%3D\"}]}\r\ncf-ray: 9e8114347e0c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de0790ebd7ff1b3eb3e9ac868647b193","sha1":"5661d17110966481f4699d5505fb1631b364c19c","sha256":"86d5eb8782c3ddcb907d82ed56535d92448033aada118c8ccba88c817c0ac0d3","sha512":"27d0bafa141eb2bbb2fe419ab41ac7fd2e969c3e84e71471eaf43a84047633b7ab39b7e055e4b2e0d74e86f53cc466c2e31bf4d329106bdec4d6b18d31896945","ssdeep":"","tlshash":"23f0595f19bcaeba08044cd764cdbcc9565f2657d7a0cd30a56acf2c81f09b72b06604","first_seen":"2026-02-27T23:24:31.658027Z","last_seen":"2026-04-06T13:51:20.45385Z","times_seen":12,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getCoinList","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7MILpQzUCDiBQlSqRAV9S3Z%2B8ZL3XW%2BmUHFQGcHXjGa48vf8sd3yWjZ6dOHa1rQActhhYiOqBg0wDdmuJmz8ZMjBX5op0O4GSXzlkhZg3vf5E2RwKbb1slxmoX9mDblCcdZHczcFQ%3D%3D\"}]}\r\ncf-ray: 9e81142b3c77783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20935,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20919), with no line terminators","md5":"25e7ca1b1cce901a0650cddb69a46d06","sha1":"b50240370eae011bdac54fa3d8da52dcbffe420c","sha256":"37a8c95e80e67b154373c4ceb5cfbc16ecd268c9e5f9acebb6be0d3b30b57bff","sha512":"4c4b87d79b9f4ef0e2343513cc0cab60eccc968b061d89b5bbbbd37c49a935a6ca73a027cedd4510f7f36aeb106c73d514f197e9ea54dec29e84d979eeefef21","ssdeep":"192:Fge2XPHge9XxSgeTXa+XTagerXFPgerXWhge7X69geHXKBDge7X9IY2dSDgu/wXl:F2dn","tlshash":"09923055513c94bdc63991e22eef7e5261cd312fecc58e1ac6c94a988ed4bb0260ab06","first_seen":"2026-04-06T13:18:59.070585Z","last_seen":"2026-04-06T13:18:59.070585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xpdusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpdusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8MabTYpWnsh8FRWfI2WadQIA6e33QeplOMnU1NUss4ovbm%2FANWLjdI3AiJaLnphS2MmvQQ9UYEKAjDJw84bIhJBjU6ATfGLfGxJFEmsjBjSDBSDSE8t3wkI7Vdg24RSTpAbqwANUA%3D%3D\"}]}\r\ncf-ray: 9e81142f0da05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0ec1d53c9bad2988e913fb8ddf0746c0","sha1":"461e698b0236454c3eafe555ac1000cb9ee70e37","sha256":"7598f9d703882fdba2f38e4dfdf9ed1e0c86407e273d9ecb70ede9174ca98e79","sha512":"137fc9aebb8d5afaa10adb4533bc07d646edf396aa9787940aab347dfaafa8da20ced5350b8abb622301c5ec55d6c3fee0ea2cc78322171d5722b167f5d64e72","ssdeep":"","tlshash":"3f9002555d1c8642a8c300a5960a3208112431602a6592485d69522584881a2214485a","first_seen":"2026-04-06T13:18:59.071735Z","last_seen":"2026-04-06T13:18:59.071735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/vendor-eb88f680.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:27.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/vendor-eb88f680.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-e35dd\"\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBImQZJ5CxSU%2FqLHe7ImSbD639EHD6%2Bv0L3U17qO0naVfZSY8e%2BIuLctQALS6%2F3JCt1zdd%2BglNgYa0wkbqMx1HIj9sy6DLYW5Hz1QMDAh%2BZTbdiCdak9ZQM4N2bMhsFRFk0%3D\"}]}\r\ncf-ray: 9e81141c7f7056b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":931293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"93e6de8cbbc1c3bfa6342405523a6f7b","sha1":"6bbf40819fcfda783ded60ba027423651fced963","sha256":"7eb512d7a7e756d927219e74c0534e711bf437d5185f3f37565bf68f0d8ac2d4","sha512":"a2cea3f865229554761f1016e0e33a737512990369d772ee1771361e4459a1bfd5db3648904dd456072007b8d9c1e01e67426de26e0a1b4ae026a0872479053c","ssdeep":"12288:b/4JoiQ754+28vbUw6+wWAcWoqrbR0JUd/WIh/mL0uZRWx9r:b/4Ay58L6+wW/WoglZd/WIh/mL0jR","tlshash":"0b1539c97292f06147ab24e240bb0006f3396e59740e84a4f16dd9db7d7ad89e277f38","first_seen":"2026-02-27T23:24:31.743909Z","last_seen":"2026-04-06T13:51:20.365074Z","times_seen":12,"resource_available":true,"data":null}},"time_used":1586,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":1046,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-d253bac1.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIvhyjTqmfuvdmHCMoYmYtlgy07%2F9JwJ8NAlCKUgqpAFRUCkkQKV1PZOuYAyockJSMXT1%2BkwM1f4bYosvLB0tBXjtHniQKINO8Yuc2ZBw%2FBx8Z1P4V8A%2B123kdfZF9oG6Mw%3D\"}]}\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69cc4ca6-3d\"\r\ncf-ray: 9e811427cfc956b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-06T13:51:20.37555Z","times_seen":193,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/currencyItem-a1c29b29.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/currencyItem-a1c29b29.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-4b6\"\r\nset-cookie: server_name_session=129c12ecee6d2e90c56082a52c41ffee; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rBSPcguxIJQA9Ty461HRfHrzUzr5SAYvCU4IjRasRHrJZNlgToSAZ6cioXBYaxqLeCTR%2F9PL362%2FheGxiQunVIww5IoG2U42gYfzpfLFKjFtlFZlvt2bf2XW83cQNB1EHc%3D\"}]}\r\ncf-ray: 9e811427dfd156b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"d606b704cfd63cf18de83c32651a3067","sha1":"7c47aabdf35c96ee849c3ea6f372aacd9cd102ab","sha256":"bb4ae26269807983deb56d849a88ce4e659b0c70ea5e83fa00a9de7c41aa7840","sha512":"8c3955048459618032252e56af18372fa63e4f76bba34e521c30f0690423de7863f3498e0183821d5f07263a12ef061b71af0e2b082918635bac9b55b20a2352","ssdeep":"","tlshash":"a421ca9aaa01c7b1cbbe91a2c5bd0414120d7bda700185c1ebed148a3b9a5fcd728a31","first_seen":"2026-04-06T13:04:20.047228Z","last_seen":"2026-04-06T13:51:20.395115Z","times_seen":10,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xptusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xptusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=e81b1620634ef6ebe02978bde003eb33; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmSYQ7AYSdAT8tXKGoDFo6NyLP3uvtZJX4x6Auagycq8a%2BDBe5vW%2FjounckSNnCxXp130Owy0ERhx43gA9aCu%2FMddSaq%2Bo2RizSz7AnTtzdbb%2FEsUKLOWN9yjOLXq9bx8W3Vv3OK%2Fw%3D%3D\"}]}\r\ncf-ray: 9e81142d3a50783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xagusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kx4F0PqcoS%2BWtXUWkXIP%2BTbuLpA2%2BeohBCRyXZuMPRSsYFbIJFrFmLU6j%2F1TWbaWub0TXq3PLYns0pZQp2XEm5ia5tHHZnoH5fDDqf3Im%2BHea18OYIIrKs%2BHCldDRjbMuJoSx0W%2FmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142d5d8a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xaueur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xaueur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQMCPMqNBHWtePIXHb48rG2Zpl43VOJNocm4hLhu8Tl7TeJViBsljF%2BpuOvhhUMoMc8ettMdcsAbnBaPtYS4m1I5gCbJN6HLJbaNnLLo%2BOhCps4EfxXuNFxLDaRyO8TXLJqIEbMlrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142d5d8b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/svg/light/zu29.svg?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xtFW%2B3IfEsbLkbWpAXZvWJ1OE1peflP5zCBeVcY2AoLWCfGPJInJkB%2BmmTzNQvs4TfDZffQ%2B71ibxPakR9wZsLbnOKQukUgjp088NHr2XgUHFaBFdg37%2B7ZweYFNtZrY7E%3D\"}]}\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6542f5dc-348\"\r\ncf-ray: 9e811431684156b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-06T13:51:48.57233Z","times_seen":208,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:31.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRc%2FamZHoh7SicziWaXGqrk1DuAFjn5zTXgGdraN8T3odcEM%2FwzlslrOpQcEuG17CD7KhT6Ynp47Inx3B7TzBqiebFgGNRyyaCRRLnUF91dcHmQUOMnLvAfoY%2BRU93%2BUr9uo%2FwV0vw%3D%3D\"}]}\r\ncf-ray: 9e8114347e0b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13835,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47f102e82a69b42862d2bec4c55d840c","sha1":"a72cb0a954bcd105301b570b46644a9dd7f8e5b2","sha256":"a1ddba3114166f494729b1c99e4d58c79fe8e0069d887372127aee16edb01850","sha512":"397a3437cc15630121ce7340c41743976e531e5416abe3c541d931278ca2f3b2a5da6bed026f844a45f35c82a8deb7e999718301c040bffdb660ad2dbf3b7148","ssdeep":"192:NLcnGtOFgQ/fnFlIqIc2hsSH/VU5pLMAFJXyoqEGAs2suEsjqv5MNiQYQhnX7i1W:rKxg205MQQYa86sYcDn8","tlshash":"7b52564a37d8ccbc46d62ed5d0ab7a8abddc346be584dc55e4a7ef1c88499b2440f00e","first_seen":"2026-04-06T13:04:20.014718Z","last_seen":"2026-04-06T13:51:20.354722Z","times_seen":10,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/platform/dev/config.js?1775481509020","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /platform/dev/config.js?1775481509020 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OE9Xt7kTN0eTe%2FwxX2AIyDB6Qs4Pxx%2B%2BxjjOAC2YO8%2Fd%2FwhvP2rus0bFlAUl0LbwrcBs5pIq%2BGnL%2BcVrUlhmIV%2Fe1OGgqgRYSjGhIiIH1xf7hEhTj%2FIbVz4RpCndkKhfOhg%3D\"}]}\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6542f5da-18a\"\r\ncf-ray: 9e8114277fc456b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-07T11:52:08.927785Z","times_seen":257,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 525\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7E61358313597CD4B\r\nAccept-Ranges: bytes\r\nETag: \"39EF9D38FE0AAB83585DD87672DB2F9F\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17681862502574744688\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Oe+dOP4Kq4NYXdh2ctsvnw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.386186Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":834,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perpcoin.oss-ap-northeast-2.aliyuncs.com/yuyan/en.png","fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /yuyan/en.png HTTP/1.1\r\nHost: perpcoin.oss-ap-northeast-2.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 6766\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A70980253031A1CD47\r\nAccept-Ranges: bytes\r\nETag: \"863DE734722C525ED540F095C94BF314\"\r\nLast-Modified: Thu, 16 Jan 2025 13:48:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9736528007879076485\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hj3nNHIsUl7VQPCVyUvzFA==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"863de734722c525ed540f095c94bf314","sha1":"ca240b3a9d6176169ceb873370709df6ef360eb5","sha256":"716be4dffa1f203eddf86670b83b92162d20f949132aa272b1a0dcf213649347","sha512":"adef9f81760545553efb97c461dffa982668e27b7d6723cd199e82b9e8d7e96430ab58a11033e46a31c9bdc06f911a41369a7f6f3892c7297b5d5b9c8a02b241","ssdeep":"96:S3CT4gSy7U1Vh95+qQ7Yk9S0WW3XzYOUqT+wn19Gnr0MxHwl/51vYkwTxVpP/Bq:t4EgFj+Lr8OJT+wpMxmOkwTzRJq","tlshash":"b6d19fd2affe643fdb37563d41881ad548f2531f36920e642e9348a27da2c607d651b0","first_seen":"2024-12-21T20:01:20.09876Z","last_seen":"2026-04-06T13:51:20.445061Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1117,"timings":{"blocked":0,"dns":2,"connect":274,"send":0,"wait":288,"receive":1,"ssl":552},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.041ec199ceb36402b99c1cbc0b62daab1.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.041ec199ceb36402b99c1cbc0b62daab1.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 400\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7AFAD5B3439E5BC31\r\nAccept-Ranges: bytes\r\nETag: \"33E405EA40F420F97179AC28C2DD83E0\"\r\nLast-Modified: Tue, 14 Jan 2025 05:57:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3462057762747232232\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M+QF6kD0IPlxeawowt2D4A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"33e405ea40f420f97179ac28c2dd83e0","sha1":"03f9cc5828ee122d39d4c86a794c34ceac7bf015","sha256":"d5be3ddd699628f3957acaab7296387240475e3bb4452b38a2f36c4300b68ee8","sha512":"d4b0d55e73775ea14abfdd07a449a526c91f58cd46326feda313701e4c392165785b8b7ec2f941ee764f055cfdc609da603416188e8dc3612a6e7ae559ca0cb2","ssdeep":"","tlshash":"3ae0f1e277d3bd78cfda143f9c3aa971f45a5d2a0a2c535c424d613f0160684812c526","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-04-06T13:51:20.380765Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1511,"timings":{"blocked":738,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":516},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSxZSkOSr8C%2F1Al85aB0XbxnJYGiemWEXBq6JfuJ7dbd5dOjq0OetZoU7Gd9pfU0wiTb3cDr2FP07jbnlKLFID7ErVHxVYAH7Yznbw02x5ShXJaeZiFoPnKx9lfz3iWaJ5u3mJe6MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811431ddd15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.elbmalive.com/ws/b5280078-9e77-4e51-9240-fea7650d36d8","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"GET /ws/b5280078-9e77-4e51-9240-fea7650d36d8 HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.xauulive.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yzrSDYtrnYcsj42j+d5Ttw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 06 Apr 2026 13:18:29 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://h5.xauulive.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: b3Vpl+b8oUCeOejH5cEWValrMfE=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=a14c87fa48db40e840459983693b1762; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xZY1KoRovfK5gpgzK0hAdW7B%2FPWRDOCJNblX1raxxh1DNLvrR3USQILzzAk8pAXYyEBolNn3EakIqv6%2F8hhQ4qIbQsBoY5WTcn%2BmC6bIlqDZCkG8r1pnfm1joZJFLZf41%2B9BNwq0Uw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e811427dddf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=516\u0026min_rtt=491\u0026rtt_var=146\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3119\u0026recv_bytes=1201\u0026delivery_rate=7375212\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=29ecbea617b0b44d\u0026ts=307\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":29,"connect":35,"send":0,"wait":284,"receive":6,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1353\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7CE63A83938FF927A\r\nAccept-Ranges: bytes\r\nETag: \"3374D8DCC672161C3E942D71643DD6DF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18229691747106943305\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M3TY3MZyFhw+lC1xZD3W3w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3374d8dcc672161c3e942d71643dd6df","sha1":"1eb89d286896e972f6f9e433541e1a406d336db1","sha256":"26a7521cd56d484b5a9775d11c173e6f67c45c68c2bde5feee095b3ff5be0bdd","sha512":"02c86573b4cf743a1576007a70029a3808734d6893546fde74c13a3912a6ad2e850309c5eb0130492321eba8a73b7256f402ea483c861761934463a14eb6aaf9","ssdeep":"","tlshash":"c921084493f1682c99fe6034d1fa5a10dc9de10e392cc8a2ffb9a804722142adcb11b1","first_seen":"2024-08-19T20:18:19.617177Z","last_seen":"2026-04-06T13:51:47.368829Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1868,"timings":{"blocked":803,"dns":2,"connect":262,"send":0,"wait":268,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lbma.oss-ap-southeast-1.aliyuncs.com/file/3f0eec83-458c-41bb-b0e1-c8da6682d9c1.png?2.0.1774953446696","fqdn":"lbma.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.185","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /file/3f0eec83-458c-41bb-b0e1-c8da6682d9c1.png?2.0.1774953446696 HTTP/1.1\r\nHost: lbma.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 1830\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7E173EA3231A2B6DB\r\nAccept-Ranges: bytes\r\nETag: \"4B3EF8C62B99A5C2073E57DCFBFACF29\"\r\nLast-Modified: Tue, 10 Mar 2026 14:23:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3598652782778033866\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Sz74xiuZpcIHPlfc+/rPKQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"4b3ef8c62b99a5c2073e57dcfbfacf29","sha1":"edb4b395b6adc8d884777339788e59f75da00d08","sha256":"ddd504d154b598383eb31999c85e0d678ee28004f2db2138fe4731db99daa6dd","sha512":"f4d13b854ae3139a998768426be833c8149851ce1227b120abcf87fc75d41bd75015554677cdddec9683d4a4e78d683973d3be2e7eb561b353890eb5bc3bbc7d","ssdeep":"","tlshash":"6231d50aea40bac1538d850270fb41675e6314888ee8f579a88fc12c3c353bf55998df","first_seen":"2024-12-08T15:39:09.749558Z","last_seen":"2026-04-07T11:52:08.960698Z","times_seen":97,"resource_available":false,"data":null}},"time_used":1336,"timings":{"blocked":-1,"dns":0,"connect":332,"send":0,"wait":334,"receive":0,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/platform/dev/logo_144.png?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:31.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6542f5da-b5c\"\r\nexpires: Wed, 06 May 2026 13:18:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAF%2BlmcBH%2FJTm4J0fVEN7wSjTsEeU6ZyCujPwgUVYY4T4wPV6mHwXnJFctGThcKGFZZnsiOfk%2BljwyqeBio3N4jzIFQR4dVzjCrF0AzHRTJHMdCp3Ty1xVveElDX8uKJxTs%3D\"}]}\r\ncf-ray: 9e811439d86a56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-04-06T13:51:20.408626Z","times_seen":105,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/vendor-4b39a398.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:26.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-16c35\"\r\nexpires: Tue, 07 Apr 2026 01:18:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYLZyLaVSuDqB%2Br0%2FEEZnUc0%2BsiBNxOoXj2sQ2%2FY7IoZ5OSTy%2BZgxcFzb0RNHkb%2BIeG7chv3ojQYs8f%2Fhh0us%2BEXNb2408UgXN0KavBy35SVdqXuaGItht9LFVz1a69adZ0%3D\"}]}\r\ncf-ray: 9e8114174f0956b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-04-06T13:52:42.012666Z","times_seen":121,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-1cbc66ab.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-1cbc66ab.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-120a\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FUwO3qqGgY3RTYote5x4kYXRVsxaK%2FMnT0Xp83baSnwYbN67ngWG18nNW3vweDiRdvnzXkHXdfhSwqtIyI7QTMGAS3UC%2Bh7zdqRQ9jK3hNBBQ8wzWGMlUmJaE6YZRAgqbE%3D\"}]}\r\ncf-ray: 9e81142d680b56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4615)","md5":"ef47732d9a3b23b2df705bf99004bd8e","sha1":"b3f5485a08e2b55394ff7d0b9a7e28b62031f0ff","sha256":"c856cb58e112026bd37495a4599a5d51026fdee8020dedd9d36d61129f427516","sha512":"466992c359743440ba217f8a4563f19510cad057a5745338c08c3b3869b1be0ff6a09b5d262f7d4d7d5bcd9cfdf049ff902326a92e95620fba85d2cb8a759764","ssdeep":"96:c2LYsH+P9YBqD+wMALTcT/3b+JcQ9Su3tKZ3hvK+3YmUeAIM8jx:c2LYsH+1YBqiwZU/3bMe5hv5keAMx","tlshash":"de91b78cf8028a7d9ab7985048580421359c3bf6b10848f1f6be9d5e63b8a7ae791725","first_seen":"2026-04-06T13:04:20.011595Z","last_seen":"2026-04-06T13:51:20.373201Z","times_seen":10,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-c8685e2f.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-c8685e2f.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOdGleTHufgbL3pkqFmlHfAlOAtbt6CiibMBdKdiK8ZXNFs0c1ym2eMew89IXERBmw5KXYz9gDMgnW9Aj%2B%2Bix4%2FTLKgABrCv19vWtYvCcyS%2BGSEoMtWuMFwQi6kWuM3vZkg%3D\"}]}\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69cc4ca6-308\"\r\ncf-ray: 9e81142d681056b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"6501efe5b6257c064df86dc83764acc3","sha1":"7ccfa4c5c1c693c133cbfe05dd90d9ac498401ca","sha256":"9a1166a4d04c57a14bd4583435aae7fc38b281cb0c9ddc1d78f5ebd98d75c150","sha512":"a5a16c46bddc294b62b91dc88607b2773372f3df43759c90d51c1cff26713c088311f42666fd526eeef21b1787d43caa28a1f54aba5fe01e59cbd52e843a0a5d","ssdeep":"","tlshash":"6d01fdf8fc0c8ebb0ea20a400290360014091fddfa1419f198867d661be4940d7de32e","first_seen":"2026-02-27T23:24:31.6241Z","last_seen":"2026-04-06T13:51:20.376273Z","times_seen":12,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAn0e%2BBcwBZGE5BJH4JI2xtS%2Bk67JXJ3uhn0uRVnsmeCB6XbNjLV8TBQFAdB4bwp79GnLqH25QubZkYg256cCr%2BZiCQje8HugRpI8lR5uhc%2Bwf%2BPleN3X78N3BI61RK9PvXzoVmK2A%3D%3D\"}]}\r\ncf-ray: 9e811427bb14783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xaueur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xaueur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NId%2FJENEVz0GsPq7UjM0qUe119zRX4jj0n71eelLjNgbTCYVAw74E7f%2Fyvv7GC6OVWOLMSkQ9GelAW2cRSpiMsulGNbQCxPn%2FPiUscgfe%2FwiLXvpWt6nYM9aP3nZIUAD8aIrcFSHaw%3D%3D\"}]}\r\ncf-ray: 9e81142f2da15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9eec75609d07e0d3b0d07d85c73a587d","sha1":"c29aa7cca344c3b63fbdb1578a1317d0c40b95db","sha256":"a8b8f7ed80bae07cf617de85818c166ca86355fab178802667787e2aad84afcc","sha512":"b7437d1e4760b7992f57e7d8c95b07d53a3a92008424dc43f74fd710df26b0225a3b78dbf0ca07236900bd155c87f6491d81f0d8d416a45f766d2665ff4d6772","ssdeep":"","tlshash":"3c9002595d1d8242a8c300a5951a170801243160266592484c5d516680881a22444858","first_seen":"2026-04-06T13:18:59.080166Z","last_seen":"2026-04-06T13:18:59.080166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1321\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A76AFD3633302C6322\r\nAccept-Ranges: bytes\r\nETag: \"B86773B6AA18C4A58D9C9879EBBA8892\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2019276143507127384\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uGdztqoYxKWNnJh567qIkg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-04-06T13:51:47.369499Z","times_seen":91,"resource_available":false,"data":null}},"time_used":2038,"timings":{"blocked":879,"dns":4,"connect":296,"send":0,"wait":286,"receive":0,"ssl":569},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7CE63A839384F937A\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.347701Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perpcoin.oss-ap-northeast-2.aliyuncs.com/echo2.0a796d6d447b346508191da5685cacae0.jpeg?2.0.1774953446696","fqdn":"perpcoin.oss-ap-northeast-2.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"149.129.12.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /echo2.0a796d6d447b346508191da5685cacae0.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: perpcoin.oss-ap-northeast-2.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A77CC0343830BF1864\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Mon, 17 Mar 2025 07:37:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-04-06T13:51:20.364293Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":1,"connect":272,"send":0,"wait":272,"receive":0,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-2b2693f9.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-2b2693f9.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-a01\"\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgFd64GD7oyjT7mEM0YkY0z0cIxzS%2BlC4AhowtnuF8hjQ8hC%2BzObXIsOm4r6QJ80lFApTvZ4WxUk4DjKfqwMquWacf1kipfmAv4a3J8xqKzLjbzPngFR4Qcep21hJFarHNM%3D\"}]}\r\ncf-ray: 9e811427cfc856b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"da14004a0f9f575b572929b51ad49d9d","sha1":"d35a421336caf8887c27adadb814715e0aa39064","sha256":"2b2693f9031a17daa3c24c8d9d29cba6b63cacf82c6071312edceda539e4d418","sha512":"ba69506805ce4c7238df0faeab121d755f8056d9c0f98c0706e85121dffafa38e659a32359078df82e6f5689a6d812865873bae7474191b37f6666a8d98fcfe3","ssdeep":"","tlshash":"0251125cfa9911358db7dacfae885b4c90007ed2e04a9d96f543c70609dfa9337302ae","first_seen":"2026-02-27T23:24:31.659423Z","last_seen":"2026-04-06T13:51:20.378796Z","times_seen":12,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/currencyItem-15550dda.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-6d6\"\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZnTCGE%2BlTc8L9th%2Bk2Bz1ne%2BQwKdNOJ6bQ8iXBr0uASNQ3beUTIitCgmUZfsPMdx9gZSFbdDCosuH4aRuKSFoH2pcRLN1VstMDB0GhezQzvz9dAHydVVorKiZPi3TWFVPI%3D\"}]}\r\ncf-ray: 9e811427cfca56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-04-07T11:52:08.949351Z","times_seen":259,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-bf4d5967.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-bf4d5967.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-39c9\"\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fex%2Fxy2Vp48YUPYMsRdTlBZbT31dTQchIa%2BKdYCVpnMr1SAvFhm3THAIQBiiyzPx%2B4pCPA1lNA7aoYfDnmSssFzgwXcfUGk3nHQL0EKN4r2TVeL%2F8t2hUem7ERdDaQrfLSQ%3D\"}]}\r\ncf-ray: 9e81142b6fe856b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14793,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14792)","md5":"eb207d8fb848b9b1d3c9e4e6b4298681","sha1":"31c1667c9b8ceef8ebb64ec27be92dc1f3a8fb42","sha256":"3a25b890f053f9407bd2c192760880dd0ad9a5a5f57b1a78a32841ab6e088a18","sha512":"fc1eed0d7fce6fb42d77347aba7108fe08df1b60a5a3f8e6f1c96247f3121f21c0809d6ccac36dc568bc955d0ff3d10dc5bd0d72f0fc0afb40cd98c77280ac5c","ssdeep":"384:RHCKOobN0qbi3/PfPnHdl2ZFjJZQnPDfqoATZss+4p4JeJ36WoSebhdlcYCLiI:05Rwc3XL27nwDfqB2VVhdlcYCLl","tlshash":"8c62e8aaf5079a3df2bff05140880050b62d7fea5009c8f1b9bcad466752ee8b395719","first_seen":"2026-04-06T13:04:20.032489Z","last_seen":"2026-04-06T13:51:20.386868Z","times_seen":10,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqVyWs%2FNDf76uiCgONLfP8AlsFMLbvJe87lqjrJatH8u17KzF1NrpaNB8ZYwsyN6BwuS1e6wR4SvRzTHT59icnNpv815Fz9wvjcdYVU3orbOcg3JUvohjIuioSbbcBfabEBpn0Pa1A%3D%3D\"}]}\r\ncf-ray: 9e81142d3a38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/filters-57934bea.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/filters-57934bea.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-c1e\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mfUbIGcbMJWDtq0aXqm42FAE8xwfnj%2FotCakiXmYPOiGaBpGuI4VYbyQ0%2BiHxSU3wbTh13qL60R6OHmktzkyGsJsLewmGzGisDOmVK%2BlMr5RdNR4hjskSbvr2AIEX6cM80%3D\"}]}\r\ncf-ray: 9e81142d680d56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"a619469c892663d16e52217c541c1a04","sha1":"387cd10ae6c0237a80a131840e635d8f82577a3c","sha256":"a6b8b67653ef725392bc0090c0297dbacf6851f23046eeded378a5adeb76a6e5","sha512":"83bda9bd9964979c5c31ec6db2a3a38ac20e3326b70e404813fb1dbed69dc7cf2c022993e33aa329911f25029fb63124cf365dbb1434834ff5ab276d2aa620b3","ssdeep":"","tlshash":"ab5124fdfcd7613356ee6ef941288454728eae20686e0a4df54bd0455933888e07f768","first_seen":"2026-04-06T13:04:20.018757Z","last_seen":"2026-04-06T13:51:20.335356Z","times_seen":10,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-1b3bf7ae.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:26.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-1b3bf7ae.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-4b2d5\"\r\nexpires: Tue, 07 Apr 2026 01:18:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVivpENinpcMwpQ4Mz8tYRZoWT9F3qDz%2BpIniQUmZJFuzCueb9Np7yirCDy32EfoRExqDGLyn0R1OOtsnKeim68hEhoK7P3ZUq3kt0ssqNW78eO9imI928i3x%2BeORghk%2FPw%3D\"}]}\r\ncf-ray: 9e8114174f0a56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307925,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"a8317930929e5bdf333a81fc4724944d","sha1":"f22e6a931fab3103200d377b2b1538b8dfff0cb4","sha256":"1b3bf7aef877cf68e2d112bc314e297f349b8413dd94d6daa23e01df0e2ccf24","sha512":"5d163ef41d1a5a781ee5e8a8e6b170095cea146246a2772027ceeddc686f9493728e5ea543b165b1a0e0e01e5dfdf907ce9ff54b01c63c2acbe6d6389371a87e","ssdeep":"6144:nz/xsaz9sKWkZ8w71ZACkFDS3vyf58rBeV05TyN:z/1WKjZ8w71ZACkFDS3vyf58rBeV05T0","tlshash":"1f64d7a9a59011bc6f27aa759bce4ad8f23ce5719c018de9f201200a4fc7ff91367617","first_seen":"2026-04-06T13:04:20.03626Z","last_seen":"2026-04-06T13:51:20.446186Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":520,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-bf4d5967.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-bf4d5967.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-39c9\"\r\nset-cookie: server_name_session=66980d5e40fb654beb9590effb8c3eb0; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ylnD7WbCrxlPGJGmXqOTQMNJfEJ%2B4tq5cTN94Pt8GGHTyhUk%2FRpvdGdupyl3Oxvk0A1IDXXu38eMZxMf8ipiAZwhWxx0SzKqLMXx3fXeOGjA6E24VKs6Bwu6TmLpnUfyTs%3D\"}]}\r\ncf-ray: 9e811427dfcc56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14793,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14792)","md5":"eb207d8fb848b9b1d3c9e4e6b4298681","sha1":"31c1667c9b8ceef8ebb64ec27be92dc1f3a8fb42","sha256":"3a25b890f053f9407bd2c192760880dd0ad9a5a5f57b1a78a32841ab6e088a18","sha512":"fc1eed0d7fce6fb42d77347aba7108fe08df1b60a5a3f8e6f1c96247f3121f21c0809d6ccac36dc568bc955d0ff3d10dc5bd0d72f0fc0afb40cd98c77280ac5c","ssdeep":"384:RHCKOobN0qbi3/PfPnHdl2ZFjJZQnPDfqoATZss+4p4JeJ36WoSebhdlcYCLiI:05Rwc3XL27nwDfqB2VVhdlcYCLl","tlshash":"8c62e8aaf5079a3df2bff05140880050b62d7fea5009c8f1b9bcad466752ee8b395719","first_seen":"2026-04-06T13:04:20.032489Z","last_seen":"2026-04-06T13:51:20.386868Z","times_seen":10,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xageur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xageur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhoNkQ4uS5k58%2F61Oux9Zq1%2FCfJvj93zlTLQzVmlJ3zprWNRbiswbIw8dORsg1swceEtxXlsAB41VTas1yDsnmRZsizInVpBEYp9kwOl9im0pBFrXnmGvwAGBzwJjUmhYpvIPFuj8w%3D%3D\"}]}\r\ncf-ray: 9e81142efd9f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9a18ad4177b0b888e10e7131a04276e5","sha1":"2861c92973498a9f7f0a0152f14072d5ace99ece","sha256":"c95ad087416c79a3bbe5d6613f89c1126747bf17cee330a2a09f84be6af15be4","sha512":"d13015b15a256e522217f52ce72594df64aff3fd8ccd9f526e9634647fadb462f0791598425e0b3af06cb31813c9beceaae324f26b9086f88f55f2a555539814","ssdeep":"","tlshash":"2f9002655e1c8242acc301a5a50a1204212531602666e2494c595226c0881a2204485c","first_seen":"2026-04-06T13:18:59.084656Z","last_seen":"2026-04-06T13:18:59.084656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xagusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cjnh2RHmAXhpUGtrUWPwix0M9Zivb0S91tKlyGoBVYMu5ToaR8dzo%2BrHpjm1rTuFxzR0KE2e2WSmdxRKfokBUQVqM%2BSN1XesVx4Q9CuHkyJNZ3MPfwsoIEe0Y3SfVgA8MmxsmKXkKw%3D%3D\"}]}\r\ncf-ray: 9e81142f2da65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5250675508fe744129131a4bb95284d9","sha1":"450c20363193b5b976dda03ea75ed7b3ac1aed6f","sha256":"1424fe17468ae7daaf2af7a2cfb63debc9f708a343c51101b2c1a506cb9db632","sha512":"3ce8a51404b91b9381ed0bcea1e0d7079b9c78dc6c58f1747134a6036771de0285385b6d3decc7c09f1ef058aaa4c41dcc69e5d417c29d094e739f1b72190998","ssdeep":"","tlshash":"4f9002555e1c8242acc310a9950a1204002431702665d2485c59522680881a2204885c","first_seen":"2026-04-06T13:18:59.085592Z","last_seen":"2026-04-06T13:18:59.085592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xptusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xptusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pziuflan%2B3kfxGcjGkm0TNkAQ0PxtqxsCdtXrK4WdYWa%2BzuwLIhnNr%2Fjn5vIg9hfNjKacFN%2Bs2nCdF95XlKFGBFYq3EE9RsC89aW0dUq1q170YXiudcrtCUP9nFNUcjbOQEz9Jkkgw%3D%3D\"}]}\r\ncf-ray: 9e811430adb45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2aeb6cb35aabdbf8ec862afd429764e4","sha1":"914cc653183764e311a353d04eeb7a29601dee85","sha256":"36116ab9a5559a4915b5b06bbd04f55fb7f8919caf0604cf618adc06829d41a3","sha512":"ac41f535f8d6372ac7d55b8db0b0152e057c7634426b2ae80d3697196c2d0ccc41bb0110b3dccfdb9b7271c82a68f467d69b97a11555477fe963de385ad6b9ce","ssdeep":"","tlshash":"df9002595d1c9342a8c300a5950a1214042431703e6492484c595136808c1b22044968","first_seen":"2026-04-06T13:18:59.08779Z","last_seen":"2026-04-06T13:18:59.08779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7794D1033386A51D5\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.348508Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1356,"timings":{"blocked":1095,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:31.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BnhEpEFbcI8ugALByc9qexthbdlQIUGIMHiux0mpX0TQLSVG32FsjND%2BUZaXi3YrkQYPNT9KakMMNo9fx9crUrRbNJ3HBadsMhjK64udAsa31uc%2BUhDmTTJ7G5P2flKJM%2BVpYdrGQ%3D%3D\"}]}\r\ncf-ray: 9e8114345e095699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"983d644f879e05585fb390a3abc6587a","sha1":"994004b1fa9262701e6ecfbe7bcbe5940b603bf3","sha256":"9e600365e5b9d06fcf2c11d5e9d423354502d8383558f1bfa6b0efe685883f27","sha512":"ff3f1538a9993369a2674779c7ad44d013d8af7a294268ecc56fd40a50f8492877b4aaa11121c0211442c7a8e836324c415fe415f3d3b449a652bd813f9cc306","ssdeep":"","tlshash":"4f01150e6674cf754a4641db42dc3ec8531f0663e3508d34414acf6c83f12760732548","first_seen":"2026-02-27T23:24:31.647646Z","last_seen":"2026-04-06T13:51:20.452065Z","times_seen":12,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T13:18:25.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSfORWn26%2Bl8CwdSwIVWI3JTCqSIg7TX2pk1B2qbk31gesms09hb7WO9gYDQoi20eKjd857ajd2nBBfypMF4p%2FP%2B6Yzb%2FODQNvYId4j1nWbdvr0H0B0d3omcDekHRwN4K0s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e8114149974783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5669,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"da2a9ec5a0a7b626f97e865ed09b8fd4","sha1":"987c5e5408615355d444c817604efb03b606d0e5","sha256":"afb65254d0ab65e1b0f9940ce0f4dfda4083b21477ae721a49af98bfd8d6caae","sha512":"5ecfcddef295b567b78914d5b33be5f32b914b15666bff0d13bee17a1733e2c75d6ac8b11a718aff682757c9bed140c8d99c48bbe54538cff23e993961a74d09","ssdeep":"96:+r82hOf5muSPEBimgt/gdr6TCZydHRH/gn2mUsGKAiowGqPuB1niHU2iHxH/2:+FcWPEQ6ZCxfa2nfD3bQuB1ni02iRf2","tlshash":"efc152b36ca0c81a2371052b9ae7f01ceb601193951a9854b4cc94ee9ff1fe588dbb25","first_seen":"2026-04-06T13:04:20.038603Z","last_seen":"2026-04-06T13:35:46.004958Z","times_seen":9,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":30,"dns":10,"connect":1,"send":0,"wait":293,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-c8685e2f.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-c8685e2f.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RebbuvBDDIp8Ig0OklMECoicpLONFiXC1IMOX5X%2Bo13LWRyf11mVbfjJg3nGata9ebyHAYgr2bqd6b4%2BHQOugFl2RITyfgyLugRPcf2lkkc82fNw2RsQlYSX1JFHS%2FLLSy0%3D\"}]}\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=e7dda8f6427c60c9e2cc0a1507b50b5f; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"69cc4ca6-308\"\r\ncf-ray: 9e811427dfce56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"6501efe5b6257c064df86dc83764acc3","sha1":"7ccfa4c5c1c693c133cbfe05dd90d9ac498401ca","sha256":"9a1166a4d04c57a14bd4583435aae7fc38b281cb0c9ddc1d78f5ebd98d75c150","sha512":"a5a16c46bddc294b62b91dc88607b2773372f3df43759c90d51c1cff26713c088311f42666fd526eeef21b1787d43caa28a1f54aba5fe01e59cbd52e843a0a5d","ssdeep":"","tlshash":"6d01fdf8fc0c8ebb0ea20a400290360014091fddfa1419f198867d661be4940d7de32e","first_seen":"2026-02-27T23:24:31.6241Z","last_seen":"2026-04-06T13:51:20.376273Z","times_seen":12,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/en-ee0598f1.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/en-ee0598f1.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-a478\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UE26C%2FUVqHsxw5eklyxa0EkugQU5SnCq5zvuGRdFq32Cfd1dx4K0Mq215TQTCJUoW4mTN%2FlheL9Pesi949jG0hUsqzwlXQ5jZlvmX1CswKYenMuDEORhTC4gZUcTePCN7Es%3D\"}]}\r\ncf-ray: 9e81142d480a56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42104,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42081)","md5":"909fc2f10a61e1389a9f595c223a1283","sha1":"fda5d74a74b93193e6cdb4c9996ffbed478957ea","sha256":"c8c530ae968dcf0018fb7c207507a9342518421344cdd4a346341de273500e9c","sha512":"5816141166ec20e1126e78d9df95e3f4fbd9c3e877e83acd8fac2a1ca67810cc49b5ec57c55785af59c59a42f66468ff528f2bba25b06f768f7b4c4c8cb353cb","ssdeep":"768:5CA4tZcEw/o7rKOdAFsifnAMC2rAaAMR6VoP6+6sPG9w1mwO6fpk7aOLxO:5CSponKOdebE2rdUVLsPWwqLxO","tlshash":"3d13f7893e1a989a04f3536774ce2e1160f60ac18255881f4fecc9fd53e2b67a367b34","first_seen":"2026-02-27T23:24:31.734965Z","last_seen":"2026-04-06T13:51:20.371548Z","times_seen":12,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/type/defi_activity_type","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyRvAaWoP20AVMi4YeksImXJluXM43qYTpIPVPVIdRgQQgwEsns79kJATmx9adwUapeZOutRsJ5RAO%2FoUR5m5huxyRnBuzvDIJyZal5dGoh6ryM0bJrXstqlJFOm4oIaXVnqYG0veQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811430fdba5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/fonts/DINOT-Medium.otf","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.xauulive.com/assets/index-1b3bf7ae.css\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6542f5da-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSmoOfhJxvr4nbFGYMsQa8CgYIq2IewZxqIVA95v0kH7J%2BDma6ScMHbVfFp7MSAqOB%2Fp67BBeDb3l%2B4rSur3woDEM%2B501sD6%2FlYZT1PBxRTu8P9TxfKkDUMZnJDBB1A4408%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811431a84556b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-04-07T11:52:46.143789Z","times_seen":598,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":541,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9YW4tsTTL2z6DpY48viqv132bJwWW8AiJdLm9p54zhIr42sjxpZyt%2FHqoCcwnkHLSelp3EUR%2B2R8oiexv9M0Lj76dar%2BNBP3xCgfXl2AnVxEZxkf%2BXmm3ccp9sFn2Y3qg%2F66EvZMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e811431ddd35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/vendor-eb88f680.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:28.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/vendor-eb88f680.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-e35dd\"\r\nexpires: Tue, 07 Apr 2026 01:18:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2B269ts8f0oetvWR3De6VeVn7%2BV2PN4G4YDWCE8bvDdW43ZwwhWQvbt9iNh0PeVBXQ5rO0oeV%2Bpzq%2BtzrSdD%2FvfIJSy4n%2FHkeNPbhUsGXbj975lSqmoD2lsnBK7n4yh2GA4%3D\"}]}\r\ncf-ray: 9e8114273fc056b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":931293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"93e6de8cbbc1c3bfa6342405523a6f7b","sha1":"6bbf40819fcfda783ded60ba027423651fced963","sha256":"7eb512d7a7e756d927219e74c0534e711bf437d5185f3f37565bf68f0d8ac2d4","sha512":"a2cea3f865229554761f1016e0e33a737512990369d772ee1771361e4459a1bfd5db3648904dd456072007b8d9c1e01e67426de26e0a1b4ae026a0872479053c","ssdeep":"12288:b/4JoiQ754+28vbUw6+wWAcWoqrbR0JUd/WIh/mL0uZRWx9r:b/4Ay58L6+wW/WoglZd/WIh/mL0jR","tlshash":"0b1539c97292f06147ab24e240bb0006f3396e59740e84a4f16dd9db7d7ad89e277f38","first_seen":"2026-02-27T23:24:31.743909Z","last_seen":"2026-04-06T13:51:20.365074Z","times_seen":12,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-bc011be9.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtwPfbiZQyDwMlGYNZaAWQqs5QMxdj%2BPwTP261%2BqyHq8IHBWTB3GjFNE1Mz1BUlyV0QAfyTov9V%2BltezDCEUxVISyDb6r5TFPB0f8LLYW8EHmPNwk2FK7N4ZjS8O7ondFf4%3D\"}]}\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69cc4ca6-18d\"\r\ncf-ray: 9e811427bfc756b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-07T11:52:08.980778Z","times_seen":365,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-9d36bf28.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-9d36bf28.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rdf0kXhvAcVkZqgrJil%2Fy%2FHJeftycDDHaFtRu113hFMcXl384TaMNnrXE0lmSk%2B%2FIH4ssVwI2%2BB51Ylo9CrBycmpUba%2FZ2%2FroXDy0qXVE%2B1xjx7fXawnF6OWd4Dm4XMwFQM%3D\"}]}\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69cc4ca6-1fe\"\r\ncf-ray: 9e81142d680c56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"f5b8dc34f4cb809f12a5b70fa7fcd8f9","sha1":"ffe9cb814a67e8bb349a20fc7af82346aa7228ee","sha256":"ccdd64755c50e718dfcaca6bfbd97209a5520f9bfc2ebaa5ca01d5a9689ed28f","sha512":"635afbcce4843fbf84785a2567e5f6df39d4f53d62ff7360a6ebc5e8c98f52fa8052a28691a98e67e3ed2f1d0662ca45f9718ec70b521f7d976231b53114964c","ssdeep":"","tlshash":"dff00e7f7d6a80b21bf788e8a2631820b61c1f4a3754c4e4d4870e10db388e7d12e218","first_seen":"2026-04-06T13:04:20.052382Z","last_seen":"2026-04-06T13:51:20.394298Z","times_seen":10,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/currencyItem-a1c29b29.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/currencyItem-a1c29b29.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-4b6\"\r\nexpires: Tue, 07 Apr 2026 01:18:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoAcCSG%2FqU4TtEDyyRTB%2Bzq5h1sxhWuA2IsWWD%2F1BuPsfV7sRxO%2BjUr9k4NnyMbWLTiaE8ubF3uYd9cjAfKpjTJVPyCkNR3pd9nSow0dh574zo%2BCJe7epxtLAALwlt8PlEg%3D\"}]}\r\ncf-ray: 9e81142d680f56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"d606b704cfd63cf18de83c32651a3067","sha1":"7c47aabdf35c96ee849c3ea6f372aacd9cd102ab","sha256":"bb4ae26269807983deb56d849a88ce4e659b0c70ea5e83fa00a9de7c41aa7840","sha512":"8c3955048459618032252e56af18372fa63e4f76bba34e521c30f0690423de7863f3498e0183821d5f07263a12ef061b71af0e2b082918635bac9b55b20a2352","ssdeep":"","tlshash":"a421ca9aaa01c7b1cbbe91a2c5bd0414120d7bda700185c1ebed148a3b9a5fcd728a31","first_seen":"2026-04-06T13:04:20.047228Z","last_seen":"2026-04-06T13:51:20.395115Z","times_seen":10,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1874\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7BC6A5B3537EF020D\r\nAccept-Ranges: bytes\r\nETag: \"FEE16CE16A23A37EF3920798742FEFBC\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8433800826941682001\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /uFs4Wojo37zkgeYdC/vvA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"fee16ce16a23a37ef3920798742fefbc","sha1":"f862e3e61b12495b9f683a71d3d06053bc407b0a","sha256":"dfca8887d489be448d10cbd211b271db5330d73d299fe9c76f3e3300a9045a82","sha512":"560e8d3bbee698aac3f311defb7031f289096c6101339fc642889b10e9887000240109dd3e25139f0f12b6b7583b0b185f96e86248bc98d3252e1bcc5ecec990","ssdeep":"","tlshash":"d731f7da97b3107f3e5d8374563429c5555b85d1ba050a2efcdebc4c9f066e70128071","first_seen":"2024-08-20T11:40:30.958723Z","last_seen":"2026-04-06T13:51:47.37984Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1653,"timings":{"blocked":820,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/assets/index-ae0ae6ee.css","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /assets/index-ae0ae6ee.css HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2026 22:37:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cc4ca6-2875\"\r\nexpires: Tue, 07 Apr 2026 01:18:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKGKtHd1LHuv5wPzB3JD2uBgbzGvhIP9M%2BelEPNsCOfDQ3Wd0SMROZfyjrrcY2RXffJsLRYA%2BhYjfA8v1LYln1mnQmGP8CfqSiVLXoz5bNyunqDTzdP%2BFt7nz8OV2crqNX0%3D\"}]}\r\ncf-ray: 9e811427cfcb56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10356)","md5":"33e8091c75d012eff93e6ad34dff2061","sha1":"5fc58cf3cbe48e939588815f9dbd965be39284b8","sha256":"ae0ae6eee7fdd9597228eaf11858526b2edd6ab75f58c8de80c6362aea1623c2","sha512":"e8633421b90c3c98d6ee196c293980408be537b852d81b2e26b34005ce74ae55de894a5d13c04ba3be32a5ac76ae0acbb08b5cc6c6fcfe13f81f00aa3f7010b3","ssdeep":"192:dghePf+EYvtnNu39r1KptNGwHJrzsWtcy7jRw6jXmLExPO:d4XVnNu39r1CtNGIJrzsWtcy7jRpO","tlshash":"2622222cb3a42638ac3be156eec84dcce109ba21d653dde5f6679a260dcf1e31771058","first_seen":"2026-02-27T23:24:31.63491Z","last_seen":"2026-04-06T13:51:20.447705Z","times_seen":12,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getAllSetting","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CndvWoHQSwGf%2BK0An%2BMO16B2EeGWRc5XDD33PgiwMij1ZbU5ldhSJXoBMkI3g3tif6j%2FfZrp5somZTbL5nDTAEcPoEIu3gjcvvkFahkTCxIx%2BDg3rd%2BzrSHwI8GZd%2BfRgDIsOY0mBQ%3D%3D\"}]}\r\ncf-ray: 9e81142b0c14783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13835,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47f102e82a69b42862d2bec4c55d840c","sha1":"a72cb0a954bcd105301b570b46644a9dd7f8e5b2","sha256":"a1ddba3114166f494729b1c99e4d58c79fe8e0069d887372127aee16edb01850","sha512":"397a3437cc15630121ce7340c41743976e531e5416abe3c541d931278ca2f3b2a5da6bed026f844a45f35c82a8deb7e999718301c040bffdb660ad2dbf3b7148","ssdeep":"192:NLcnGtOFgQ/fnFlIqIc2hsSH/VU5pLMAFJXyoqEGAs2suEsjqv5MNiQYQhnX7i1W:rKxg205MQQYa86sYcDn8","tlshash":"7b52564a37d8ccbc46d62ed5d0ab7a8abddc346be584dc55e4a7ef1c88499b2440f00e","first_seen":"2026-04-06T13:04:20.014718Z","last_seen":"2026-04-06T13:51:20.354722Z","times_seen":10,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/svg/light/user.svg?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HpQlZV%2Fqs0vtuCm5d67os992BiW%2B3T5vazcTUdx39vb0GaldlQk9ljFcknLLZup8m4dNB7RAhjcm1nxd0A6ZU8JvoS%2BcUtxam6oauYQi42UKSvcdu8be9OqnsGs074tKIc%3D\"}]}\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6542f5dc-227\"\r\ncf-ray: 9e811431483d56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-06T13:51:48.563498Z","times_seen":221,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/svg/light/zu447.svg?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19SlyUeBY8ybj217zW7TB3tzcgB%2BBf9OgX3ZYy8tcLUgCDXVfn1%2Flh2VtOinmZl28yYCtlJ6vVbIZfpL%2BOCG67bEb9o3vYcXaXp%2B7kPXSK%2BAXHoj6doA4IGEvOtpKbpZ2zw%3D\"}]}\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6542f5dc-1a4\"\r\ncf-ray: 9e811431684256b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-04-06T13:51:48.565472Z","times_seen":260,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/type/defi_activity_type","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=eae0c5ab2c3eed591fcdce315741ad97; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDzgAdIZpFZIYm5h3%2Bq6dw%2FOHlfZiyQoHx1IUjI6%2FzDYcl3g9oHXWItrFl7KFdhklgve4aoNxBRIC96D%2FyD3oxMLeMk1os9rj5x9NboCX3cyZGke2OGh5tjtTZgSuunF9vs60MEMHw%3D%3D\"}]}\r\ncf-ray: 9e811432cddf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-07T11:52:08.934144Z","times_seen":476,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/charting_library/charting_library.min.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:26.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6542f5da-2a6b\"\r\nexpires: Tue, 07 Apr 2026 01:18:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMlJ6fmcE1WFdXBdKQAfpbezING263ip1BiU8R09EMJTPBE0LZl9gjfsHmqGosV3E%2BgraIz1LiUsqvJfPGgHibF8LwiFgJg%2Bke3yK5CH87KUbibwz3ezifeS8CqsHsdXxa4%3D\"}]}\r\ncf-ray: 9e8114174f0756b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-07T11:52:08.976668Z","times_seen":629,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/config.js","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:26.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUnPICsWoORreZQ8lfkVgFUtl5vTXkuWSpMIeHGIZA%2FZpxVJG0Fr5%2Ftv%2B3RXj9pnH%2BW%2B4kkqHW0SEgCEJTsCtdJdbGpAQ4En%2BYRp8oJ6yPJ78vyw6%2BK60j7DsKTgBbE%2B7n0%3D\"}]}\r\nlast-modified: Thu, 26 Mar 2026 15:21:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 01:18:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c54f08-77\"\r\ncf-ray: 9e8114174f0b56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"67ff8a6aea8b026a686a55acabdaa518","sha1":"4a15b427024362562506bc25e32ff4366f62039f","sha256":"3199afa5d09d297658323a19b1ec939756856b700c9bb6aeb46687aa505ebfc1","sha512":"969bedd269b1bad6dac4746692b67c3a0ad79ddd36c1db6dc79e3f1f1d25ae9a8575d9f7f7b2c15b9d5070a7020ba60c19350dec7073a7a24252bc8869b2cb6d","ssdeep":"","tlshash":"16b0923d7b66090226a302806a7b774ca2d0e43dc8488c44c2929842a8464a3f0a68ac","first_seen":"2026-02-27T23:24:31.722069Z","last_seen":"2026-04-06T13:51:20.345416Z","times_seen":12,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/fonts/Arial.ttf","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:27.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.xauulive.com/assets/index-1b3bf7ae.css\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6542f5da-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWzR2ex3TTpbTmjCM7z2un%2FoLK0JnQ%2F4LJCtxGR2oi7ch%2FpRm7JIKCv4kj%2FU5%2FyYUgYi0GynUfruoAA0XtrPBHLXBVEnthqK4Fv%2Fe4zeQLRYsGYxthIiWT8zWxxvBCdglHw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81141e5f7c56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-07T11:52:46.124429Z","times_seen":862,"resource_available":false,"data":null}},"time_used":1864,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":1587,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xageur","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xageur HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bd8fce003ea109442d53f787e1927234; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zanA1ppicOKrex30SINnAQQyWmHTEqqAcTThtaGAnY788SlcemkjmC9iRPx%2FIWyppljUdvktD9xxPvzGdYTzasKErSd81y1E2pJ6aKdHiQ2BprRDO9GYDh8FIUZuDm09SE33Km%2B4jA%3D%3D\"}]}\r\ncf-ray: 9e81142d3a43783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elbmalive.com/api/common/getMt5Amount?coin=xpdusd","fqdn":"webapi.elbmalive.com","domain":"elbmalive.com","tld":"com"},"ip":{"addr":"172.67.139.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:29.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elbmalive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 00:42:45 GMT","end":"Mon, 15 Jun 2026 01:40:27 GMT"},"fingerprint":{"sha1":"E0:68:14:A5:57:D3:9D:C4:70:2B:0E:B1:C0:68:15:C3:FA:96:E6:85","sha256":"C2:3F:16:12:B3:AE:B1:05:A0:35:81:8E:EC:A8:71:AB:EE:DD:B9:59:91:A3:AA:98:D4:EA:0F:82:D5:E6:B8:F6"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpdusd HTTP/1.1\r\nHost: webapi.elbmalive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://h5.xauulive.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://h5.xauulive.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=a37ff17f144783517e3d093004f9fe6f; Max-Age=86400; httponly; path=/\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByK%2F0BetJVbUKd%2FH7%2FQBPF6WmKj%2Fj1MHHaINol7NmPBidGbSp4mEdRQnCWZQvfe7kC%2BWSLYE9ukb51MZhRVl2ZxDsZctI%2FZrOmfX3ydaTs%2Bqif1iS0OQlcNbOFXrqZABR7YYfkmHDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81142d5d8c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T01:38:15.38248Z","times_seen":13484197,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1774953446696","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1774953446696 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:18:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1907\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B2A7BC6A5B353746030D\r\nAccept-Ranges: bytes\r\nETag: \"9459A1B16A6346A8DAF9E2E700D8A0AF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17079821215456291766\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lFmhsWpjRqja+eLnANigrw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"9459a1b16a6346a8daf9e2e700d8a0af","sha1":"7aeef8fb0483dd8f7089324bf338a8baff19c377","sha256":"fdbb68edeff25fa09404179dfc144d6343af95599093ad71043bd44939983a04","sha512":"87f2d69526f66e1169d4ca8a4ede4337e912b04ceab6438d0cb29021f3687a3e6802fc103fb77f7af9ad5ec1ebba3e404794cf0daf8a13f2c05c2be05c7e1376","ssdeep":"","tlshash":"c141f9a8f7a5f50fec540152146b69040df94844b560c04f06df94be4aa7af38c9f584","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.382723Z","times_seen":113,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":1100,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/resource/svg/light/mengbanzu12.svg?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:30.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8jyvH7YvUEKdQ3QmpNk1krqIkSGf9XmBstodjURCYnIVaAGWZMEIqtQrZEXbQHXneq42eTvM%2FIGSBHiCBehgVbuQNaN9STg8GpL0Eiln5UvKDsJI0XM2tPzH3B9XTe01kE%3D\"}]}\r\nlast-modified: Thu, 02 Nov 2023 01:05:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6542f5dc-322\"\r\ncf-ray: 9e811431583f56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-06T13:51:48.59313Z","times_seen":224,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xauulive.com/platform/dev/favicon.ico?2.0.1774953446696","fqdn":"h5.xauulive.com","domain":"xauulive.com","tld":"com"},"ip":{"addr":"172.67.162.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.xauulive.com/","date":"2026-04-06T13:18:31.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xauulive.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:26:33 GMT","end":"Mon, 25 May 2026 23:26:32 GMT"},"fingerprint":{"sha1":"5B:A6:EB:A0:2F:07:16:E0:C2:7C:13:09:A8:78:CE:2B:E3:76:8C:8A","sha256":"C3:DD:09:50:E6:72:21:A8:C4:38:1A:B9:97:1C:CB:57:7E:BA:1C:7D:AE:ED:02:27:45:00:93:8F:07:2F:46:CD"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1774953446696 HTTP/1.1\r\nHost: h5.xauulive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=59b49e2ef4ddb98652e372ee4ec5cb05\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 13:18:32 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48Slhf27%2F2syW8otQCqjKt69%2FMbYqtK6MykDZC3JIXMlZmmHs8oSgHX07UCCF67w62ITgQmDCE6rzxE%2BWCQnRfC8rpxyfc3%2FOHWmHzTQ1qprsH6OslY72QMq4rMnnjHLzco%3D\"}]}\r\nlast-modified: Thu, 02 Nov 2023 01:05:30 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6542f5da-10be\"\r\ncf-ray: 9e811439e86b56b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-04-06T13:51:20.383205Z","times_seen":65,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}