{"report_id":"b384d60c-6262-49af-b289-0f499048d58c","version":6,"status":"done","tags":[],"date":"2025-09-02T04:39:16Z","url":{"schema":"http","addr":"coin-up8.top/?shiny","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.80.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coin-up8.top/?shiny#/","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"title":"coin"},"submit":{"url":{"schema":"http","addr":"coin-up8.top/?shiny","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.80.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-07T04:39:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"admin.coin-up01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coin-up8.top","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-29","domain_rank":0,"first_seen":"2025-09-02T02:46:46.446274Z","last_seen":"2025-09-02T02:46:46.446274Z","alert_count":0,"request_count":22,"received_data":2009599,"sent_data":10552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"admin.coin-up.cc","ip":{"addr":"176.97.117.117","port":443,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-09-02T02:46:46.443462Z","last_seen":"2025-09-02T02:46:46.443462Z","alert_count":0,"request_count":1,"received_data":213775,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.uviewui.com","ip":{"addr":"61.160.192.96","port":443,"asn":140293,"as":"CHINATELECOM Jiangsu province Changzhou 5G network","country":"China","country_code":"CN"},"domain_registered":"2019-10-06","domain_rank":0,"first_seen":"2020-04-11T03:19:35Z","last_seen":"2025-08-26T21:15:25.387212Z","alert_count":0,"request_count":1,"received_data":357,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2025-08-28T14:37:49.360516Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"admin.coin-up01.cc","ip":{"addr":"176.97.117.116","port":443,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"domain_registered":"2025-08-16","domain_rank":0,"first_seen":"2025-09-02T02:46:46.447927Z","last_seen":"2025-09-02T02:46:46.447927Z","alert_count":1,"request_count":1,"received_data":107761,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-account-account~pages-authset-base~pages-deal-deal~pages-index-index~pages-lend-lend~pages-lev~7967578d.c0f141ab.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be14729b18f5b896e4a85808587ada8d","sha1":"3c98b421ee46af75ce0f83489e83901664f12f83","sha256":"215e14cd565303d07305a84fc9a2e8d5c8c39c91a8cf32bc604ff426dd448d9d","sha512":"44904a67d036816aed110bc47c0a4ff758bd022c78912088a1618606f362c908676eec98b0002e8ad4b365cd23cc7ae801ff916ae70395a0cb62dd73d392c818","ssdeep":"192:A5k+wPaY0OoXX/ftkb0m1YFOKTY++VcvVk+8ym/2K/fiSX6fRSSW:A5LKODJ08MSkJym/dnSW","tlshash":"8672b74dbccc706405bbc81db0273a4b812abe9781a5fcc5b7e05d754daa0da224fb98","size":16687,"data":"","first_seen":"2025-09-02T02:46:52.868045Z","last_seen":"2025-09-02T04:39:20.671305Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/?shiny","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-13T14:38:30.031382Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/static/common/js/touch-emulator.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"178ba7db6232252a555ba6ff953756a8","sha1":"31129606e2c7e395a73184f30e81e835a424cdf5","sha256":"2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d","sha512":"dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd","ssdeep":"96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq","tlshash":"1a32314f098a226204bb7329fb9e904af67e85a311012056fcbc5f653f72a758694ecd","size":11668,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-10T08:22:35.395349Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/chunk-vendors.554cda28.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b58caae696d3298b321347151840ae9","sha1":"8316a3b7fd9b9eca0a7fd21de2ad690309de75a3","sha256":"f0099b0c82c0bc0f23016b8170391a586741046ee80968f042963f04dd3eaa3b","sha512":"97674d5e56d988e3b57512c17eb43951a5a7395ccc2c1a49a74f4e610276fd5646a209058774119b5dadfb859fb6a3a67fbc0e5a1b6e773ea822bed67b1fda22","ssdeep":"6144:SYDEsj7aV7N0vHTASzZTRONob/AEvmfr11hpl56GmUBizXLLUCHJcBtg:147N0vHUSzZTRONBhhmrX4tg","tlshash":"25f4078df285b0b606e770b5403f220bb2376999b40a84d4f275e4d4ad7c94e622bf7d","size":787929,"data":"","first_seen":"2025-09-02T02:46:52.855406Z","last_seen":"2025-09-02T04:39:20.653217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-index-index.887f86f1.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce378c070d19d6ff5a849d0fc75f5b6","sha1":"cc0845519ecb1cbd31893466cfa644ae14f8ddea","sha256":"ad945585f4e82af822e2c7d9dadea99d1bd2fe1b7cbb01db71da45a729f97c31","sha512":"72f883c746c0d0735cdfe802596d27c39700bfe0d3e1aa395f1b85dc295fecb783a1124e2a338ee4d5fe060028370e6dddc95a8758c790b3f589f2c9c2bf4892","ssdeep":"1536:Xg3YAOj4CnUbZ8QqVR91amg3NuTCg3t2TDKTSD1:Q3POj4C3QqVR91aX3u3U1","tlshash":"35834b11b4cea05e4eabc821906b6659c1323fa6d074f4c9e3f2a9744d974da331bf9c","size":82312,"data":"","first_seen":"2025-09-02T02:46:52.87071Z","last_seen":"2025-09-02T04:39:20.631751Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-account-account~pages-authset-advance~pages-authset-authset~pages-authset-base~pages-deal-deal~6630a738.dceb95d7.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"408d6f133f040f81a7f3465d8964ec4a","sha1":"01c2cf8f21cc0638421c21eb5cc79eb6077581b1","sha256":"e7a59b92ddba4c826b6b8108860d3ad2c14a4cce595964d7ef38b1a5e8c0c71e","sha512":"34e9fa701adf4c7766d0a20ecab075689cee3ce83b5418e0bcc7060a6f7aac3d6aef7048d262006c9433d4748c990e24bc31ff975abb2de83efe1d6b90248fd5","ssdeep":"768:gg+gQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXOa/+EkY6IFb+:msYId0FHoMqu7NdEAaM2OisFi","tlshash":"9a43b8e6f20c1cd17bbfcd4fa340a34e79e1b712d8a52d29e16756480ef33a621457a8","size":56744,"data":"","first_seen":"2025-09-02T02:46:52.887573Z","last_seen":"2025-09-02T04:39:20.628672Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-account-account~pages-authset-authset~pages-index-index~pages-lang-lang~pages-lend-lend~pages-~85564f92.8f1fe56c.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"beb263d7f227f0e0c85d32c9d01110d1","sha1":"14949c1e48aefafa6b43c9b2f1acdea9eda2560b","sha256":"7f6f39a5ce7eaef7e0a60b85591f8308ec8f62be1555a7f9aef95521f2578e64","sha512":"0a46f56047e262e9d142f90563f59e3fa7c7fa6e33a6b9631a93dfc27b0201511d23beb5efbbc4504289420d27d58455dce9533b5c2e54fb279ebc1ebc3b5bf1","ssdeep":"96:znir8weQKsOT8kHO4aPvxDZZzaBWZHvDP2zLmH2MU3IzEwsufDd/+2971vxDZRf3:znivb+8kaPfMOvbAK7dGM1fQ+P0CH","tlshash":"ff427411728ca4055567ed526077ad9a93317a76c4a2b0c2f792f9760e772cb330afcc","size":12846,"data":"","first_seen":"2025-09-02T02:46:52.883421Z","last_seen":"2025-09-02T04:39:20.645824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/?shiny","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-08-13T14:38:30.032419Z","times_seen":1450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/?shiny","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-13T14:38:30.033374Z","times_seen":1565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/index.d7a2a745.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fc0809a04133eaa687e5d169b8f4b69","sha1":"91a166acd27a3cb6ad284e8171bfad1edf83cbf9","sha256":"c882998a15da2068949fa01fc1dc0c3f10814c2c05acde6915808844a18834c0","sha512":"0c5b780056a151654a5b5cee005132fbf9f8c7338fa35cbcfb80729e955eb9c920d982ce958e8a45426dedee65de7b9dbb575fc4fdec3b709db6046e282d6ce3","ssdeep":"12288:NBoJVxfRqfGU2M4/CatZM66meSEkv4GHC0Hmt0H7/eYFtZhT88jzx55Yz/7mT7vb:TcUfGU2M4Rt2isi7/eY/ZhT9","tlshash":"94e45b1326cc997a4b460942f85f375bb1bd0c36ba89e8e2c3d59f2467d8bc4d052b36","size":668538,"data":"","first_seen":"2025-09-02T02:46:52.908423Z","last_seen":"2025-09-02T04:39:20.679581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-account-account~pages-authset-advance~pages-authset-authset~pages-authset-base~pages-deal-deal~6630a738.dceb95d7.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/js/pages-account-account~pages-authset-advance~pages-authset-authset~pages-authset-base~pages-deal-deal~6630a738.dceb95d7.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-deb0\"\r\nexpires: Tue, 02 Sep 2025 14:46:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6749\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jv%2FZEJWYa2AbHbeZZYoS0TLPwMmxMHh19cSAD3vZcmYky6Bq7j5T%2FeBtXC6kNCpo%2BlLpemOCUyfOP59r6L9e3oz6ka0FdVw4CsY%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a5216baed569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57008,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56480), with no line terminators","md5":"408d6f133f040f81a7f3465d8964ec4a","sha1":"01c2cf8f21cc0638421c21eb5cc79eb6077581b1","sha256":"e7a59b92ddba4c826b6b8108860d3ad2c14a4cce595964d7ef38b1a5e8c0c71e","sha512":"34e9fa701adf4c7766d0a20ecab075689cee3ce83b5418e0bcc7060a6f7aac3d6aef7048d262006c9433d4748c990e24bc31ff975abb2de83efe1d6b90248fd5","ssdeep":"768:gg+gQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXOa/+EkY6IFb+:msYId0FHoMqu7NdEAaM2OisFi","tlshash":"9a43b8e6f20c1cd17bbfcd4fa340a34e79e1b712d8a52d29e16756480ef33a621457a8","first_seen":"2025-09-02T02:46:52.887573Z","last_seen":"2025-09-02T04:39:20.628672Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-index-index.887f86f1.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/js/pages-index-index.887f86f1.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-14188\"\r\nexpires: Tue, 02 Sep 2025 14:46:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6749\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RItKz3WSbCFPL0YfRONXFoJm%2BphIXObJlcdVEQGAZR0d6s3T0Blis3NzNpX338rYxBE1%2F4C%2FzjYjISR9yJdCSl4d9aliToaFvKw%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a5216baf0569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82312,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64819), with no line terminators","md5":"5ce378c070d19d6ff5a849d0fc75f5b6","sha1":"cc0845519ecb1cbd31893466cfa644ae14f8ddea","sha256":"ad945585f4e82af822e2c7d9dadea99d1bd2fe1b7cbb01db71da45a729f97c31","sha512":"72f883c746c0d0735cdfe802596d27c39700bfe0d3e1aa395f1b85dc295fecb783a1124e2a338ee4d5fe060028370e6dddc95a8758c790b3f589f2c9c2bf4892","ssdeep":"1536:Xg3YAOj4CnUbZ8QqVR91amg3NuTCg3t2TDKTSD1:Q3POj4C3QqVR91aX3u3U1","tlshash":"35834b11b4cea05e4eabc821906b6659c1323fa6d074f4c9e3f2a9744d974da331bf9c","first_seen":"2025-09-02T02:46:52.87071Z","last_seen":"2025-09-02T04:39:20.631751Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.coin-up.cc/upload/20250901/d7043a0ac7eb77fe1a65d7ff047fe806.png","fqdn":"admin.coin-up.cc","domain":"coin-up.cc","tld":"cc"},"ip":{"addr":"176.97.117.117","port":443,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:57.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.beirong-app.cyou","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 12:51:12 GMT","end":"Fri, 14 Nov 2025 12:51:11 GMT"},"fingerprint":{"sha1":"66:CC:61:CF:CF:8D:83:88:CD:D2:F9:7A:18:ED:68:41:06:64:D0:B1","sha256":"88:E6:6F:9B:27:46:3D:4F:71:96:06:FC:DD:B0:6C:83:61:FA:EA:34:A8:9F:CF:20:27:B3:EA:80:B8:88:97:FE"}}},"request":{"raw":"GET /upload/20250901/d7043a0ac7eb77fe1a65d7ff047fe806.png HTTP/1.1\r\nHost: admin.coin-up.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Sep 2025 04:38:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 213428\r\nlast-modified: Mon, 01 Sep 2025 06:11:47 GMT\r\netag: \"68b53923-341b4\"\r\nexpires: Thu, 02 Oct 2025 04:38:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":213428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 740 x 260, 8-bit/color RGBA, non-interlaced","md5":"0dce3e8976c79c41d90364e310bea1ef","sha1":"4631d36254e942e35e8469e9dde81c0a8e28246c","sha256":"82173ba81c6d2f7670e3b28e8e79004a90a10b5fb88e5c43cf15a2c08fc9b144","sha512":"465cf4f120741698ad24f9a84d9348927966409a189ecd3071d452469cc30478ca9107dbead202e4f33615f4235f427b36ae2f4ca357f7dc3849bffbb15f65a6","ssdeep":"3072:MozCbESepua+6zGIVfAXKvbRu97L+ZXj0Eyo5lG2mgnKbZygApZWnwptz:dzWEnuaZ1u97L6j9yElJmgKN2pAnwT","tlshash":"5b242313159096bfc2cd1790a27fabe950bbe1317f7932a11698b8903ac860c0b51ff7","first_seen":"2025-09-02T02:46:52.880175Z","last_seen":"2025-09-02T04:39:20.632485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1901,"timings":{"blocked":460,"dns":68,"connect":193,"send":0,"wait":387,"receive":592,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.uviewui.com/uview/common/favicon.ico","fqdn":"cdn.uviewui.com","domain":"uviewui.com","tld":"com"},"ip":{"addr":"61.160.192.96","port":443,"asn":140293,"as":"CHINATELECOM Jiangsu province Changzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uviewui.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Fri, 07 Mar 2025 03:09:18 GMT","end":"Tue, 07 Apr 2026 03:09:18 GMT"},"fingerprint":{"sha1":"31:2C:D6:D8:B8:8C:B1:AD:5D:A4:41:00:F1:02:77:CE:17:FC:73:4C","sha256":"D0:40:3A:89:26:0A:7F:81:D8:88:CE:9D:87:CD:AE:76:6C:CF:12:FE:FD:52:0C:6F:7B:D0:79:31:C7:06:04:8B"}}},"request":{"raw":"GET /uview/common/favicon.ico HTTP/1.1\r\nHost: cdn.uviewui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: Tengine\r\nDate: Tue, 02 Sep 2025 04:38:59 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Tengine-Error: denied by Referer ACL\r\ncache_control: no-cache, no-store\r\nPragma: no-cache\r\nVia: kunlun10.cn6425[,403003]\r\nTiming-Allow-Origin: *\r\nEagleId: 3da0c01417567879390688858e\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T16:46:16.1024Z","times_seen":17889793,"resource_available":true,"data":null}},"time_used":3224,"timings":{"blocked":-1,"dns":992,"connect":246,"send":0,"wait":1207,"receive":0,"ssl":779},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/uniapp/index","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"POST /uniapp/index HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: zh-cn\r\nContent-Type: application/json\r\nContent-Length: 12\r\nOrigin: https://coin-up8.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, X-Token\r\naccess-control-allow-origin: https://coin-up8.top\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOpzRRpmBOeEJrT0bP3c71UaBhk8OW5uwK06G4EgDxpwNp532%2F%2Basa9dLLm6ZytzSym3OD4l9I61ShxMxANgujJcoS%2F0DeuuQ1g%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: lang=zh-cn; Path=/\nPHPSESSID=99d25b6f99bbff2049d73501654b3af9; Path=/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a52182b03569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53952,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a5ae9060ddabb78f9a00550e1868cb09","sha1":"6256f90cdd44bcbeaaa43be3f2ebb12debf12bb8","sha256":"abf728b458942055f7f38ab09e5971d2cfa9ed99f60a92c22c8e82922f8870fb","sha512":"1467c54c6703c2ddb3408e3a45e56e8791c3123f2c01abb112f7f00a5caf12cb7042644c85614d9f28b7f3888e53413eae0ef7227e9beb70d5c5fc5d8baae31d","ssdeep":"1536:q+rEujRRjboUHEd3YkJmZVHBhNNVUyDBXKk+jVLrq/LBHwLOQaNhV7yZzkB+fcA:pXm","tlshash":"0233cdd1214d68f4caf75ec183eeb6862aacf1cb5dc89f4283eacf1949a59731607350","first_seen":"2025-09-02T04:39:20.634353Z","last_seen":"2025-09-02T04:39:20.634353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/img/shortcut1.53c7b8b1.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/img/shortcut1.53c7b8b1.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 144371\r\nlast-modified: Fri, 20 Jun 2025 00:20:57 GMT\r\netag: \"6854a969-233f3\"\r\nexpires: Thu, 02 Oct 2025 02:46:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sak88ncX%2FxsZpmTSgeZhMh897fCNtsWF%2Bq%2BVybaUmLMC2bSchc5iusgJyXzuKYLlowupQHDjzb1wcby%2Bqk6C78byk6h5Rg0Ng8I%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a52183b04569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 462 x 462, 8-bit/color RGBA, non-interlaced","md5":"23288a55c7fa22bd529cc7d32d1434c9","sha1":"eaf3780e6b1ea0f8d327491d58a4647c84eddf42","sha256":"8a4377bbcdc31fdfc60e2e017a04ef05eb44f8580439d2685d733de6d9263555","sha512":"e2e292620bb7b7c111693814e79de4fce85ec552a0817e8a74ec40a0c65b9b9ebe7f26207b11ff9526ed7d754a1b68dc82128d51423c43e0f266e43e71a2cd91","ssdeep":"3072:NSYWbkIJz7AGYtfRJeOzloKEZMwUIbooVQAYnn66yz89kRwQ:NSBbHz8BRbaHZBbokQAYnnawY","tlshash":"87e31208cff6d29c71c3411525c41abb5af36ceec620c9623da29d8e459d1722eeb17e","first_seen":"2025-09-02T02:46:52.877895Z","last_seen":"2025-09-02T04:39:20.637046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/index.d7a2a745.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/js/index.d7a2a745.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-a337a\"\r\nexpires: Tue, 02 Sep 2025 14:46:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6751\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2BhDjPDtgXI%2F5Pwys243hfCQjagbDj%2BqNvZsfqGAByWXugzyL6FrVwA5BtrfAqE0MiJhQMViW%2FNOS2QU77gDbaPAzwxwgPmTbEc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a52142ae3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":668538,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50420), with no line terminators","md5":"f847aa1ecdeaca59942d9ba07b953ecd","sha1":"fec15fb08c790476d83438403b7e119b80ad64e8","sha256":"7ba3aa1aa545346c3aff00034cba8c18ad8413653dab8584e7331c56f5d0821b","sha512":"2519a587e9f51b8721b5452fc5b182d6f9b1582c429593e1ce3472972b98dc6efdaa4428443d775e09a7f9a04794128e29e4e5b550861537bf3251971e4cd25e","ssdeep":"12288:NBoJVxfRqfGU2M4/CMbQt+Ke1KQgyWL0ZLM5QYovcY4ruS8FtZhT88jzx55Yz/7I:TcUfGU2M4Xbk8/ZhT9","tlshash":"a0f42a07a1ca83b94e6b04c2b89a37e67c7acc5197cd9cf783b8d71466fc7c0a095a51","first_seen":"2025-09-02T04:39:20.638922Z","last_seen":"2025-09-02T04:39:20.638922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/imgs/bottom_bar/home1.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/imgs/bottom_bar/home1.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 872\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-368\"\r\nexpires: Thu, 02 Oct 2025 02:46:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fh%2Bc0k9wW8ysa3Lr0lKVjNzz1iLYDZefFgbd%2FeOsB2B1lDEHMpVgz%2FTucgp%2BqrYPj1Mg47MteODJNzmH0ITOn%2BkfE8ifOJjM1fI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a5216daf1569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"4f7b001679de71530f0103b32322d7b6","sha1":"5cd32d31711c58f17e6d00b2f61114c2c2708f12","sha256":"5c3e86778d2e8d0543a6afa3c2b546c7a62e1b1ee7f569ffa0e05eecacea758f","sha512":"6996778d339aa4337e5ce58a82f159fe6b9910cecab8a504c316c567a58ac3adb9f5d7c989044cf20ff44ab4cdc6fa6052bb4bdd91d4b77c7310cfdeb6276f91","ssdeep":"","tlshash":"ef11b3c6f650011681026c200d66cc3349b28ba54022820c8a07a8c7c771aaa88d2730","first_seen":"2023-11-24T01:27:37Z","last_seen":"2025-09-02T04:39:20.641802Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/img/logo.b5a7dd38.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/img/logo.b5a7dd38.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2890\r\nlast-modified: Fri, 20 Jun 2025 00:19:11 GMT\r\netag: \"6854a8ff-b4a\"\r\nexpires: Thu, 02 Oct 2025 02:46:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ht9X5wg%2B100RhISuJXh9lGcF4GpXp7lnUVni3AHOUaNeSd0JtKVlg9z8kDAx4Q8GsA55an8%2Fu9qGIa2EWFIZey9IQgcuRFx5x08%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a52181aff569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 32, 8-bit/color RGBA, non-interlaced","md5":"e683fc363500138496439e4a59c48c82","sha1":"f450166adac833ef90a819ca4edbf3cb17f4e8a4","sha256":"3a3a42daa91bd3c32d4fa2f01e9681c1803ab3205539c8dee3a1cbce4daa67e4","sha512":"23a251ba25ba8b491818d7e3152a8fbd3268d585216ccd5cc13b6b33d4d3ea079f2fc6fdc6c622354314a28c47489878730727786746f05077d71cd545a6d8b5","ssdeep":"","tlshash":"e0512a546f06a69840c5ccbf6eaaf776f93a1dd1ce3f32c968104b33987144406f2a9c","first_seen":"2025-09-02T02:46:52.898383Z","last_seen":"2025-09-02T04:39:20.642695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:58.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Sep 2025 04:38:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Tue, 02 Sep 2025 15:38:59 GMT\r\ncache-control: max-age=39600\r\nset-cookie: __uni__uid=rBEQUmi2dONqW0q9A5wCAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-14T15:37:02.283002Z","times_seen":20230,"resource_available":false,"data":null}},"time_used":1489,"timings":{"blocked":604,"dns":1,"connect":281,"send":0,"wait":280,"receive":0,"ssl":319},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-account-account~pages-authset-authset~pages-index-index~pages-lang-lang~pages-lend-lend~pages-~85564f92.8f1fe56c.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/js/pages-account-account~pages-authset-authset~pages-index-index~pages-lang-lang~pages-lend-lend~pages-~85564f92.8f1fe56c.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-322e\"\r\nexpires: Tue, 02 Sep 2025 14:46:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6749\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DY6qIhi7el86XyqC6yk8x5Fd%2BrDlx%2Bj%2BvieQ9OaC0p%2F%2Fscez8inobsQ7rdUcnzRtzbOHOmRxEnUXkChdMCh5xx1DKfxzqIOEYcQ%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a5216baef569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12490), with no line terminators","md5":"beb263d7f227f0e0c85d32c9d01110d1","sha1":"14949c1e48aefafa6b43c9b2f1acdea9eda2560b","sha256":"7f6f39a5ce7eaef7e0a60b85591f8308ec8f62be1555a7f9aef95521f2578e64","sha512":"0a46f56047e262e9d142f90563f59e3fa7c7fa6e33a6b9631a93dfc27b0201511d23beb5efbbc4504289420d27d58455dce9533b5c2e54fb279ebc1ebc3b5bf1","ssdeep":"96:znir8weQKsOT8kHO4aPvxDZZzaBWZHvDP2zLmH2MU3IzEwsufDd/+2971vxDZRf3:znivb+8kaPfMOvbAK7dGM1fQ+P0CH","tlshash":"ff427411728ca4055567ed526077ad9a93317a76c4a2b0c2f792f9760e772cb330afcc","first_seen":"2025-09-02T02:46:52.883421Z","last_seen":"2025-09-02T04:39:20.645824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/imgs/bottom_bar/hangqing.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/imgs/bottom_bar/hangqing.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3441\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-d71\"\r\nexpires: Thu, 02 Oct 2025 02:46:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSfeSyzcLGSSiUc6QhCvUW8z%2BR%2FwVmTXcWOPxvUzAuOUbz1nRWGnFSdxJCAayH1cu9CigXB6ug21qVxgf7Kxm0rvciqs97ZHrco%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a5216daf2569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"7690d9464974a1f8f4d503d505796d21","sha1":"09430a28bd1ceb52739afdfc5cf659f1d15b2f5e","sha256":"02d67e6167c04b3cbaf5b76fca7afabb75df4eae52265e146de41d9a1d867558","sha512":"1af4e68f45b52ffa700d34f091c9c49b507a6fceb81601ee6092419bad4449c00cfb75ec7e939f919f73f7f73eb641e5c791144e2ae519ea593906d476164e59","ssdeep":"","tlshash":"16616d89641285ae000f0b7d396f9d074a2695a582696e4cdfee878f8730d21bc3a75e","first_seen":"2023-11-24T01:27:37Z","last_seen":"2025-09-02T04:39:20.648096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/imgs/bottom_bar/heyue.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/imgs/bottom_bar/heyue.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3495\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-da7\"\r\nexpires: Thu, 02 Oct 2025 02:46:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZnM5HMHv7AghtKPU6u%2Fphy%2B%2F30sYTz0Ae4ZgU14mk37DcTQDUlPVOTimrLjiiv8mb1MhxfMfGbdq0rfTCuM6gu8mB%2FEg2zNALA%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a5216eaf4569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"9ecb2fa9161dc79987e3dacd622f2308","sha1":"7e4db2c9b63c8294b6920ae291c61cdecd973047","sha256":"6ac2324818aa022783ba172e67062137a5ade089df583aef16a2f9a098953911","sha512":"381b94f62615a15a8c65bc5e8a12109cd25236aabd8b431e895dd6528ea8538dbe637e35802a0d7aec3b85fb9e9e75fb7a7476d1607d3e9d9984b69a333de787","ssdeep":"","tlshash":"81717ecd9942442a100d06bb2c67ea0a8e6ec644d3592e14eaae830fcf11c91bd76e97","first_seen":"2023-11-24T01:27:37Z","last_seen":"2025-09-02T04:39:20.649546Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/chunk-vendors.554cda28.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/js/chunk-vendors.554cda28.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-c05d9\"\r\nexpires: Tue, 02 Sep 2025 14:46:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6751\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTkEonzJLrDzBeRTNZJ94Dyx0KzPCpoTKLi98O5rvK8%2FVkW7mkyIVgz0Ivlqqsf5Ekk1QWXtbjZwCjpIFew7VOAr%2BsBJxcjF5Ak%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a52142ae2569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787929,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65218), with no line terminators","md5":"9b58caae696d3298b321347151840ae9","sha1":"8316a3b7fd9b9eca0a7fd21de2ad690309de75a3","sha256":"f0099b0c82c0bc0f23016b8170391a586741046ee80968f042963f04dd3eaa3b","sha512":"97674d5e56d988e3b57512c17eb43951a5a7395ccc2c1a49a74f4e610276fd5646a209058774119b5dadfb859fb6a3a67fbc0e5a1b6e773ea822bed67b1fda22","ssdeep":"6144:SYDEsj7aV7N0vHTASzZTRONob/AEvmfr11hpl56GmUBizXLLUCHJcBtg:147N0vHUSzZTRONBhhmrX4tg","tlshash":"25f4078df285b0b606e770b5403f220bb2376999b40a84d4f275e4d4ad7c94e622bf7d","first_seen":"2025-09-02T02:46:52.855406Z","last_seen":"2025-09-02T04:39:20.653217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/img/chongzhi.399ebdd4.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/img/chongzhi.399ebdd4.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 18539\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-486b\"\r\nexpires: Thu, 02 Oct 2025 02:46:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6748\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZKbNnYR4jDXaCxscBTOXrPY9yiY5L6QaZzmUfiY02Q43w5y6ETre3gt%2B7ff5bWw%2FRhWN3TDT2JsKK%2F995HI7FUQNXvIhyvlosk%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a52181b00569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"399ebdd427e481f47c111b6a4b771190","sha1":"6c67dac73c3ab6309a512b269b5c788f9ac0a9ba","sha256":"57e74512aa96ba8aead1aa153c4e87592da09b7184549e99e5a5bb11ff171788","sha512":"708367e067e53f5493bd83a971d3a07dcadddf54f4e039b471b79a1fcf88f467a96f43c9c77ff863b52a02d0391d03e4a56aa5880d2839d81bf9d3054bdce117","ssdeep":"384:d50wQ8zJZluL04ccthuDruObBwENYyfvwmGmIUVpb+o:vq89ZIL0mhuOOVwENYdmGtUVpSo","tlshash":"f282e108042810e37e8789da3c8f5f3d6b51b3c3672cb568d23f97559c06e16365a7e5","first_seen":"2023-11-24T01:27:38Z","last_seen":"2025-09-02T04:39:20.655408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/img/tibi.78bc33be.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/img/tibi.78bc33be.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 18037\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-4675\"\r\nexpires: Thu, 02 Oct 2025 02:46:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kt2ERLVyFEMAK8XXNTMhjNkH0Ftkjm6arFbpUXzJ5FtWzPKMZIbP2jCy1RGl18XShd8te%2BFUJIQmZFoQqCtl6LaKUuHG%2ByMUfFA%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a52181b01569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"78bc33beac8fd0e1b4415f0bf4f2d9b1","sha1":"bbdda4c4d2b9827e9e100d5ac3a35557b5940e90","sha256":"9590018564dd019be20af8e3429d059a2db3b6d4ffcc11d7b4552aa90420e23d","sha512":"5ccce01fc19acad9a660407dd2d4ec28c7c6df01134a41615533a284e88e5ffd45d1c97d5f6832b27515a6e74f55d6fce835f44827aaaa2cec4119578fb34cca","ssdeep":"384:d50woDdKkiCis8bvxDqMDWTxeCitKP5ZaoB:vGLKvxDqlgLEac","tlshash":"bc82d04fd4f105041d9f0bb7a5ea6e99a586811203f9bec6896b8907d7febf828200c1","first_seen":"2025-09-02T02:46:52.900161Z","last_seen":"2025-09-02T04:39:20.656811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.coin-up01.cc/upload/20250705/11680857505d6dea4c6741822ac8f214.png","fqdn":"admin.coin-up01.cc","domain":"coin-up01.cc","tld":"cc"},"ip":{"addr":"176.97.117.116","port":443,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:57.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.beirong-app.cyou","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 12:51:12 GMT","end":"Fri, 14 Nov 2025 12:51:11 GMT"},"fingerprint":{"sha1":"66:CC:61:CF:CF:8D:83:88:CD:D2:F9:7A:18:ED:68:41:06:64:D0:B1","sha256":"88:E6:6F:9B:27:46:3D:4F:71:96:06:FC:DD:B0:6C:83:61:FA:EA:34:A8:9F:CF:20:27:B3:EA:80:B8:88:97:FE"}}},"request":{"raw":"GET /upload/20250705/11680857505d6dea4c6741822ac8f214.png HTTP/1.1\r\nHost: admin.coin-up01.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Sep 2025 04:38:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 107414\r\nlast-modified: Sat, 05 Jul 2025 17:44:29 GMT\r\netag: \"6869647d-1a396\"\r\nexpires: Thu, 02 Oct 2025 04:38:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 712 x 300, 8-bit colormap, non-interlaced","md5":"54b867a43b5312aae4e3884fbb11a1ce","sha1":"00a3b316f1943fea1cd8012d7db5995940fd57bf","sha256":"421e7615270c204712c48a2137e0c29ee829f23aada99776f42fc88a390e9f86","sha512":"f6264260d9cb3de56be6534afb2c6e4ca89c2d81e9e7dafde5a33222c6dd823af00209eb49804a2fe5335b278ee2bbe8d05e3a4064dbab536b3ddb56db7d5b78","ssdeep":"3072:wArpjqttARQzn5gLCeVgbwR0D41Brxb03:xFjo64MCe06vU","tlshash":"c7a312858bdb6973dc8106a37d176e1f2770602aa14e235e1f2f74f93a2a71d12e42c5","first_seen":"2025-09-02T02:46:52.894512Z","last_seen":"2025-09-02T04:39:20.658417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1696,"timings":{"blocked":456,"dns":62,"connect":195,"send":0,"wait":389,"receive":392,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"admin.coin-up01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/?shiny","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-02T04:38:54.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /?shiny HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 13:18:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uItkhMLRMScPptNkro7O%2FnwpiZY6DaXt%2F1oe46hprUQD7W8GXNOpde39hLwFucKnS4UXUWGlOKbG2yV%2FVXl6gGSZmOlRHhyEK0%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 978a520f2c1a56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (454)","md5":"7ccdd90f6a2c5e1b693f56783b646a2d","sha1":"0d05a7061aea572500a23a3a53ca1e1c1de881dc","sha256":"577b4b32a2caf584ca25dfde7c4f03373a38bbcf3809cfa375d60385a4384043","sha512":"2470e4960fe4518e41d887167280800f921e676c2688664277297373262fb471e09c26e138b0c3d64622f6560b994ccd067a2a3e6615d5d277a171d373876ea7","ssdeep":"","tlshash":"bb1114d72d01c5182721a55d78faf29c44ef86592c52d851b8cd1c9d0fd1fc84f78458","first_seen":"2025-09-02T02:46:52.885746Z","last_seen":"2025-09-02T04:39:20.660411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":37,"dns":17,"connect":1,"send":0,"wait":618,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/static/common/js/touch-emulator.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /static/common/js/touch-emulator.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-2d94\"\r\nexpires: Tue, 02 Sep 2025 14:46:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6751\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G14md%2Fsp1E%2FIx%2BtLCMrpCtCIZyu9U0c09ZLKqf25GSPYGrat8Ycei%2B354y7eSli%2B0K%2BeoXWJjPnmHsATLDL2EYTfCqPLBzwMmvU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a52142ae0569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"178ba7db6232252a555ba6ff953756a8","sha1":"31129606e2c7e395a73184f30e81e835a424cdf5","sha256":"2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d","sha512":"dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd","ssdeep":"96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq","tlshash":"1a32314f098a226204bb7329fb9e904af67e85a311012056fcbc5f653f72a758694ecd","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-10T08:22:35.395349Z","times_seen":737,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/index.css","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/index.css HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-178f9\"\r\nexpires: Tue, 02 Sep 2025 14:46:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6751\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQ%2B2SzOX6GPp5I5QCMsSMsf4OGtweFagPh6y%2Bet4Cz9i0g5JnBtlz%2FatXXRZ6FjbcajpuI%2FjKBKpaPDDzkBxf%2FIg%2F4bxlelwaNg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a52142ae1569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-08-13T11:50:58.668435Z","times_seen":6431,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"coin-up8.top/wss","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /wss HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coin-up8.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: P476JDF/y65HI7RJx4hGuw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 02 Sep 2025 04:38:56 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: 1HEjdtbru3WuNAX3XUkfkUVy0cw=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1rqrR85I1KU7JbcfndbSGHpZdzDcD1iVTpuT%2B9G9Qn5%2FklPaM%2BbafDlRUDO80jrWhOHFl6yTMICztzRT3FzMUBgRm0uekTfOLMEknQMuLvcuzXjDNznPnwpLRrEHFaI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 978a52176a9f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=465\u0026min_rtt=418\u0026rtt_var=162\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3326\u0026recv_bytes=1155\u0026delivery_rate=7554782\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=bf38baa2d065772a\u0026ts=637\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T16:46:16.1024Z","times_seen":17889793,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":25,"connect":24,"send":0,"wait":621,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/uniapp/index/init","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"POST /uniapp/index/init HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: zh-cn\r\nContent-Type: application/json\r\nContent-Length: 12\r\nOrigin: https://coin-up8.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, X-Token\r\naccess-control-allow-origin: https://coin-up8.top\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKmHNwiaTQ6I%2B3VNx9NiZaTXqITmC3wyD3HP68%2B92Mjs5qg96DUEo8y9Mt4XBuWP%2FmaFXi2cC%2B1xLcIegMox2vXHmNu3XdrP2qk%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: lang=zh-cn; Path=/\nPHPSESSID=f83eca4742e79d055954d14805b08eb4; Path=/\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a52171af6569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"66defedd6a615e221db9ff688ee15406","sha1":"3332f03cc0637147b6abac70037dcf8a5177414b","sha256":"306f6f869acbde0feb476b496aedfd8a27319795ab7f2f4bd41677a096a6d01d","sha512":"72f425f0f187dea35da633c10682890388a2da6ca5f6e0d64fc57d2eac90cb5ad796f5ebdc4adbaa21582b4c8f8bcc160b8e2cce08982c643ce12b993d66d720","ssdeep":"","tlshash":"ed115e649e4963538d4332d1645f7e51dceb00f99e2ee325a70deaac44442f5392fc91","first_seen":"2025-09-02T02:46:52.896715Z","last_seen":"2025-09-02T04:39:20.669261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/js/pages-account-account~pages-authset-base~pages-deal-deal~pages-index-index~pages-lend-lend~pages-lev~7967578d.c0f141ab.js","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/js/pages-account-account~pages-authset-base~pages-deal-deal~pages-index-index~pages-lend-lend~pages-lev~7967578d.c0f141ab.js HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814898e-412f\"\r\nexpires: Tue, 02 Sep 2025 14:46:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6749\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFOMqxARddMKWUxnyygxMIPE2Wcb05YzH%2BHjsLCk5jkz2CFUBWxjZh9rmX3UsZ7ukE9Qf65ghVH1H%2B%2F7eVqPnfu79XG%2Fu%2Bgu3YI%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a5216baee569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16687,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16331), with no line terminators","md5":"be14729b18f5b896e4a85808587ada8d","sha1":"3c98b421ee46af75ce0f83489e83901664f12f83","sha256":"215e14cd565303d07305a84fc9a2e8d5c8c39c91a8cf32bc604ff426dd448d9d","sha512":"44904a67d036816aed110bc47c0a4ff758bd022c78912088a1618606f362c908676eec98b0002e8ad4b365cd23cc7ae801ff916ae70395a0cb62dd73d392c818","ssdeep":"192:A5k+wPaY0OoXX/ftkb0m1YFOKTY++VcvVk+8ym/2K/fiSX6fRSSW:A5LKODJ08MSkJym/dnSW","tlshash":"8672b74dbccc706405bbc81db0273a4b812abe9781a5fcc5b7e05d754daa0da224fb98","first_seen":"2025-09-02T02:46:52.868045Z","last_seen":"2025-09-02T04:39:20.671305Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/imgs/bottom_bar/bibi.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/imgs/bottom_bar/bibi.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5002\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-138a\"\r\nexpires: Thu, 02 Oct 2025 02:46:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yO3X4YMz1hhDTFOzJUAcBJdmqs6jnTbbm%2BEq7u16206RdbdsOOR22cI2aubhtYA9CLc0TNhRRROm8iAs6YYhXUhLcRQtGdmSxh0%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a5216eaf3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"92fc0568400d1acf50ac9ba8089e61e0","sha1":"0a1976708b27fe24fcf6ba279ecc0e35b16ea861","sha256":"ac5daa48bb7841a4947c2ab181685465de9269bb08a0d7203bc0981673c15f0b","sha512":"5d318f36ec68f14c7a3d4476b0313af69da65ec904b2c5c2631ee140dd814aaea489a156ffde132553bb9278fb030bc132b9dca758c3d0d93c7ceea5ecd9f6f9","ssdeep":"96:6rxpF2vncLCOjfP+S2o7hHaVy/acRDTOmBda58r7Lk4oHm:Uxv2vncLT+to7h6kCcMm6OX44oG","tlshash":"65a17e87f4234470cd772cd88a097defca115c38beb43adcca1667511647abfd95442a","first_seen":"2023-11-24T01:27:37Z","last_seen":"2025-09-02T04:39:20.672706Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/imgs/bottom_bar/zichan.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:55.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/imgs/bottom_bar/zichan.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1968\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-7b0\"\r\nexpires: Thu, 02 Oct 2025 02:46:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RoQDC12EFvIqeKoiAF9Dwhq0D8pgw2zJR0lE3wRWDHyiKayTz8ngfSCGqy%2BroNzqJXOrcmQtY%2FYUgLhKMb7CYDLCu39QaKGtDF4%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a5216eaf5569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"0053d63395e381e0d0ce1459c65e15cb","sha1":"468d103b00090f9b0ca49ffd74ffcb73c8cd5d43","sha256":"a37d51b532688ef0348fc61ad2d18b322c9bb25cbb0d9caf0e8abd9e5e7f0d57","sha512":"afd586f8741df883dfb84b63db9c96e11600b1b907bd5ae411e95af8d97a8938d38ffc7ad9d15fd6bb538816d216d582b5664382f9c1396e41381e1edb3e8eb8","ssdeep":"","tlshash":"ae412a4191e5d5ea4064ae05cd2624295b6bb080a07a3f88bc338e22c4289bc825efed","first_seen":"2025-09-02T02:46:52.862384Z","last_seen":"2025-09-02T04:39:20.673772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-up8.top/h5/static/img/xinbi.8184f6db.png","fqdn":"coin-up8.top","domain":"coin-up8.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-up8.top/?shiny","date":"2025-09-02T04:38:56.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-up8.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 29 Aug 2025 14:57:55 GMT","end":"Thu, 27 Nov 2025 15:06:27 GMT"},"fingerprint":{"sha1":"10:3D:A7:8A:BE:05:02:5A:85:A0:3E:01:38:83:9D:E0:04:AB:6B:8A","sha256":"12:E6:37:2C:DC:46:BA:9A:1C:6B:08:82:6C:83:10:86:9A:21:A8:B1:03:9D:86:7D:53:B9:2D:00:9B:F7:2B:E7"}}},"request":{"raw":"GET /h5/static/img/xinbi.8184f6db.png HTTP/1.1\r\nHost: coin-up8.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-up8.top/?shiny\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:38:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4910\r\nlast-modified: Fri, 02 May 2025 08:59:58 GMT\r\netag: \"6814898e-132e\"\r\nexpires: Thu, 02 Oct 2025 02:46:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6749\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htsXN3xiADaH3t44h0U6asomUlkTIS9Y40cTV38uD7BWwDRKhY%2B3D8IIHJ7uPWHdbivxehUxWtG42YfWN5q3fAdI0MMT0TDZpgU%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a52182b02569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"8184f6db507d4d6ffad6b5c4c0fcac94","sha1":"540623fc09a4b903c92a7ba787b77b286a3c825f","sha256":"591f9118d704967def295773f0e0f2c7ad4f5503a3bc271729bf356cd068b722","sha512":"a9e7b9d62326a2a465b0be74ba2506452cfc739c7d6fc8599eb614cde56911678d85d415fdaa26c153fee9811c88fceac6af791f979f80abfc3576d0783c1f73","ssdeep":"96:0SMllcHitlIxv9vk7C1+I4wWHLihk/xIQUvsk5pC1oJdzQm1y6Irl4XrA:0SHIIHUCD4waGQUUk/CKJdzf1y6oSbA","tlshash":"4ea17c8d0850491e544a4ab22d93ea091777f88467646f4caffdd68fc620ef07c257d7","first_seen":"2023-11-24T01:27:38Z","last_seen":"2025-09-02T04:39:20.67474Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
