{"report_id":"b490a89c-308e-4172-bc28-7bda0e0ef59c","version":0,"status":"done","tags":[],"date":"2026-06-22T17:09:24Z","url":{"schema":"http","addr":"m.exerecetpxiexi.cc","fqdn":"m.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"172.67.166.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/#/","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"title":"Learnfx","dom":{"size":89555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57586)","md5":"f1e11b6c01dbb0824ba0d782287e9f65","sha1":"43cdc9a3d8b24a2a593660076cebc3fd02250f12","sha256":"1d5464cb520c1b619808e363ccfed46a389b4bd377d554f4a274f1bc41dfa8a8","sha512":"f609a915ec060b8a9e793bde37ef16d5a2084287745ed63cf5233a05f69aa6e9119ff336e0755815a5f3c8b268e9488d0b2c54c00676e3abf1b4c4d10b741fe6","ssdeep":"1536:nbS4AmL0WOlGoxfp9pgWV+li5mWy0ErarAZaBWlWt9M0dUXz64M4Nkcq8PyErVu2:ngllUBlipAW9TWnco795R","tlshash":"3d930c72a359463fd21b45cd64a03f0a39e7f24fe6879804a2ec03576fd7c90c9aa974","dom_hash":"domhashc714d019b4d612d7519f1dcfdd7e6684","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.exerecetpxiexi.cc","fqdn":"m.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"172.67.166.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T17:09:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"m.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.exerecetpxiexi.cc","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2026-06-22T17:07:58.135864Z","last_seen":"2026-06-22T17:07:58.135864Z","alert_count":21,"request_count":23,"received_data":125240,"sent_data":13429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pc.exerecetpxiexi.cc","ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2026-06-22T17:07:58.136166Z","last_seen":"2026-06-22T17:07:58.136166Z","alert_count":46,"request_count":23,"received_data":5011429,"sent_data":11913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.learntradefxs.cc","ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-18","domain_rank":0,"first_seen":"2026-06-22T17:07:58.138261Z","last_seen":"2026-06-22T17:07:58.138261Z","alert_count":0,"request_count":26,"received_data":1450359,"sent_data":15392,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.hytjtyreygrjhtrjher546.cc","ip":{"addr":"104.21.54.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-27","domain_rank":0,"first_seen":"2026-06-22T17:07:58.137968Z","last_seen":"2026-06-22T17:07:58.137968Z","alert_count":0,"request_count":1,"received_data":22221,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"m.exerecetpxiexi.cc","ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2026-06-22T17:07:58.137005Z","last_seen":"2026-06-22T17:07:58.137005Z","alert_count":1,"request_count":1,"received_data":5269,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/chunk/vendorec61e529.js","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8cc0aa93a265e49a9d39439d4484ca9","sha1":"6d2376737e68fcce59209362b1bb1eeec4383314","sha256":"0a2567e813c3a4e86db78a0e12679867ed6303122be99fcbb9824b612928f92a","sha512":"dc79bdcb85995c78a824992893a5ddccf7f486ba5a6eec22b9434df2d11fa18c779abed4ee41375a4e5a915c1d5c7a49d3c1411bcb5035e5252416cd45f15d94","ssdeep":"24576:d32mv9r2OExkZ5Cbg3Aoi7i80IP4H2/FZ:d32mv96OExkDCbg3Aoi7i80IP4HeFZ","tlshash":"55456dd4ba95b46883b791d9107f1002b33e2b9db40d84a0b1bdc9e9296bc49d367f7c","size":1178754,"data":"","first_seen":"2026-03-16T14:17:59.730299Z","last_seen":"2026-06-22T17:10:35.536896Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/chunk/home3ea4effb.js","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"202a5ae9e843534cfeb71de83643a8ef","sha1":"8814cc97ac8d0a3678d4c62a1b03aace1bb97c07","sha256":"f8bc1810c25c8e381f8e00844314c8a0ffd33bfae7bb3d8de3159b11cb59a8fa","sha512":"b7452e080e00222a5c164840d7fff01480a80026a9ae6a5c5f44301074e7223a5c2dc01381ba66baa43beaad10abb5fc347e70bdf1d1676a6cea9a69529253eb","ssdeep":"3072:PbBt86dkDXuMgJfQ5O9h84uGh0poQVu0xMibBcUR2u6x2QfLh2+a+dOll6TwTlVL:PboJJpRq4llGR8F","tlshash":"20545c91b296c7fde273418e6019b001b2583efef694c9e1e1fd8d171aa2ce1426df25","size":304441,"data":"","first_seen":"2026-03-16T14:17:59.727938Z","last_seen":"2026-06-22T17:10:35.523996Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.exerecetpxiexi.cc/","fqdn":"m.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-17T18:19:14.429699Z","times_seen":40111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.exerecetpxiexi.cc/","fqdn":"m.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-17T19:40:59.453598Z","times_seen":41782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/entry/indexe1910c4d.js","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53be16e72cb5d629a4016e907dccfe5e","sha1":"283823017b6eb8004f3e874e5cf1069a1d587f70","sha256":"7d3c491451fce6873af20360227e11155d5e12fae98990f7ee3b8344f8d396ca","sha512":"84d90b0c86b0926799fb4e29f410aa1c9141ac60c5ca564cbe5cd36e9193212be46d524ed47b8502621379c75af411ee94ce2f189bc7a58b0f5c34542384a1fc","ssdeep":"3072:cKgI8uZvynLmpjr0pgnSxcGvT0ISSdsUX30f6M888AqwCvvkIUsyE/rdd99f5gBY:cKg6ynsygSuGvT0ISQf8LvomS4dioQV","tlshash":"6a346d2956a9748d18b6e60ab5cf3e3454d82cf7d785c8c10af885e902f2d2753a2f3d","size":252438,"data":"","first_seen":"2026-03-16T14:17:59.73128Z","last_seen":"2026-06-22T17:10:35.53514Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/basicSet/getBasicInfo?t=1782148139239","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.256Z","timestamp":1782148139256,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/basicSet/getBasicInfo?t=1782148139239 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://m.exerecetpxiexi.cc/\r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/chunk/home3ea4effb.js","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.073Z","timestamp":1782148140073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/chunk/home3ea4effb.js HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Jan 2026 21:22:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729524-4a539\"\r\nexpires: Tue, 23 Jun 2026 05:07:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 89\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2HOHOqC2fXM7qtuNi6jFfBKSbAeOZvD%2B13hZQosTY5om7b1FOttoWTX6HMjMkfnJyRe%2BuYbs6MrsGjCe2LL3MgjcVy9or6JNbojgKue2JlJiOEFTRmHgPeVkHKAhMJKCvOcr%2FxzJw%3D%3D\"}]}\r\ncf-ray: a0fcdbb37e415a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304441,"size_decoded":104870,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"202a5ae9e843534cfeb71de83643a8ef","sha1":"8814cc97ac8d0a3678d4c62a1b03aace1bb97c07","sha256":"f8bc1810c25c8e381f8e00844314c8a0ffd33bfae7bb3d8de3159b11cb59a8fa","sha512":"b7452e080e00222a5c164840d7fff01480a80026a9ae6a5c5f44301074e7223a5c2dc01381ba66baa43beaad10abb5fc347e70bdf1d1676a6cea9a69529253eb","ssdeep":"3072:PbBt86dkDXuMgJfQ5O9h84uGh0poQVu0xMibBcUR2u6x2QfLh2+a+dOll6TwTlVL:PboJJpRq4llGR8F","tlshash":"20545c91b296c7fde273418e6019b001b2583efef694c9e1e1fd8d171aa2ce1426df25","first_seen":"2026-03-16T14:17:59.727938Z","last_seen":"2026-06-22T17:10:35.523996Z","times_seen":8,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/logoe2c2b693.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.263Z","timestamp":1782148140263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/logoe2c2b693.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-14c252\"\r\nexpires: Wed, 22 Jul 2026 17:07:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 89\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdjhqfK1P2qF9bM6IeK%2BjMirbdcz9z22XEvYRdCxWzOC83UXpX0Ndkb4tf98MISsbc13C15eJzm6%2FfSdGg1qDNK7CMY%2BE3WzWTHbPfB4G9PlVpTIGBx%2BId6xQUQspeqaZTUX78QLhg%3D%3D\"}]}\r\ncf-ray: a0fcdbb4ae915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360466,"size_decoded":1332970,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"519ce4a04b2de3530853318ab9cfe65b","sha1":"75f65169fa9dd8f36f1585718b1c2a11bff233c0","sha256":"ba783fa1481134348374c2a2a8e3d9751405734130f4e316b5e5cdfec24ecd00","sha512":"842658b852be879812437a1dd6010e7c22f2bde3d040fe4b1df584e94cf2e7c9161db900f28eb6c229df2780b015f79dbc0697c0853c6013bbf92285d5be32e4","ssdeep":"24576:sritiO6a5FCwzVluRZctuhCKot1pfprugwdPQ76+h/cO:MitTFjakwhCKIzqFtj8cO","tlshash":"1e253389f4402bc7db9ff6f0b3605f0c6ea830685aa41a791a33d9013918b1f13ed796","first_seen":"2026-03-16T14:17:59.72089Z","last_seen":"2026-06-22T17:10:35.513928Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/kr65c1cb50.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.277Z","timestamp":1782148140277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/kr65c1cb50.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729526-3fce\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDfxsxDhS%2F5yfkRhZP6eOEP%2FKKKBJTaKOYOu%2Fk08ALzc6BpkBoAqtMOM67G9KjK2ABc84oDGQK2RHTr%2FwCFm%2BbrRgQSZ7PnohZ6Acitzev67ctI6yzl92B17HG4aDuXqqjUJDCs%2BsQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb4cea05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16334,"size_decoded":17116,"mime_type":"image/png","magic":"PNG image data, 126 x 88, 8-bit/color RGBA, non-interlaced","md5":"12026204fd51a2f30b900c805c3ad0ea","sha1":"26ab28adc010c55f84ce5ba2987d60056d5f4c27","sha256":"65c1cb5071f0c761928cd14f5e0aebaace90c854f3e07e7724be1bdde5c033b4","sha512":"f5b3863743e3798cc97c5c04c75e56c4893f86115b65d6819b6e95d5e658f19791a0c6e8b10196a17d38f61976660558c26e17aeeac1b72a46eea8d7f1444a60","ssdeep":"384:c9n6C1FidkNl9G5i+UeFJvftAhm/NG9SzC99DlI:c9nYWv+xf+hm/Nd89i","tlshash":"5072d04b9345cbf8d2c9c2682a7e1d163352dbc51e8992449bb034eca7b104f598eab3","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-07-13T01:18:26.131848Z","times_seen":262,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/ar7c042e25.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.286Z","timestamp":1782148140286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/ar7c042e25.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729525-1430\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfh5eY94b1HrQ3ENiZ83hqjgXhAOjoBvWKAMhT406N4IgA5F6LueXFFjJRq5YjeXOVFljXLfnnIxhHqPOFrRdS%2FC8KySv0opPPy6Yk58xKtZlMcxvj46FNvIhV0oP1L%2BIuz8kUBrrA%3D%3D\"}]}\r\ncf-ray: a0fcdbb4dea95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5168,"size_decoded":2325,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee Ultimate 10, datetime=2020:09:16 19:35:15], baseline, precision 8, 626x313, components 3","md5":"97fc54e98bbebb9ca3a2251b69850f8d","sha1":"5c8030bdf9ea111df689e8fee05f69fb32f85ed9","sha256":"7c042e25b586e816050a329d1e603db9213736a1ba744a4776989a5d28848b7a","sha512":"aeacf2ac57581175a29fffac20070020633a915327c0fd8b4622656b6f69545946ef6c3b21d0bfd67d71850a67c7dd301f5ea5fd0a5b035f31fb43145dc1a44e","ssdeep":"96:H3qotXBoEwwVOIIIXd6xziiiiiiiiiiiiiiiiiiiiiiiiiiiiz:HbYSOIIIXwxziiiiiiiiiiiiiiiiiiia","tlshash":"7ab124bc1f1e083ec5293a3850639579696b4fdb9b320c5c9e4d6608b1c31f69ac5963","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.923943Z","times_seen":211,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/csaa39a20b.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.298Z","timestamp":1782148140298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/csaa39a20b.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729525-7c1a\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zMyRJheWda6dHkdGyzFDz%2BB1aQ2xByXJc41GoPShANYiO%2FeWDW8rlqLRs%2FGTGOVCHch2Qmi6LnK0ucgZ1hwzrsC2Kez4CKdxeY8yDAuK7c8Rm4ont7iB7FfgAc9bnqPSZ9%2BUoS8WQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb4eeba5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31770,"size_decoded":32384,"mime_type":"image/png","magic":"PNG image data, 423 x 283, 8-bit/color RGBA, non-interlaced","md5":"76db88ab1934d818962c4c45f0771199","sha1":"b7a9762cf77c7c50982415b633fbf0f37268aff5","sha256":"aa39a20b45aa6aeba62a0684594fa32f1ec02c2bb0cd595c2486f0017c2c3cc4","sha512":"d7f8475994b35ebc2899d02ccb988c8555e7d25f71c6de2f8135a317f9ecb2c9b98b9383db9f7a5d1e0519a0e62421cb68926f7c35d995066bc7f33fff529247","ssdeep":"768:0NqCfs/6+4WsVoWzshIGt9SDIHAu7++ymgjkIZ9LbTd6lv7:5ZSjNVfohIGt9SD0bCJjkIt6lj","tlshash":"60e2f222fb4e83c50d6965bc7ea47c10d52e841f757a0c2acc0483c82ecea5a5ca8ed2","first_seen":"2024-11-21T01:45:06.782617Z","last_seen":"2026-07-09T23:40:40.973806Z","times_seen":55,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/d000c7c3c4a3b91a380af3d3413bda8a.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.865Z","timestamp":1782148140865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/d000c7c3c4a3b91a380af3d3413bda8a.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:30:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0384-10ac\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7bQR296dsmguUh4lvtRB%2B%2FaUZogUY%2F6gnQ34aYG2bt%2BZp4S4v2CwCKefPQ43dUMUNszu2H%2B1BCYRTFEw5XilzrebQhY8TAngZ8YxJgn%2F%2FU2qeH54SC%2FafpMoGbQuO9P62Z60smfeA%3D%3D\"}]}\r\ncf-ray: a0fcdbb9d8a31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4268,"size_decoded":5056,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"77b12291ee07f3a97e53ce62c7c19825","sha1":"2efd4e971353f8303fe14b132c931191b8859c83","sha256":"f6b850151f5ed03c21b3dbd113e329c76f9933ade70824fcda23f5a92d401c0b","sha512":"9efa13f327758af2f56ca7ed1635636b039242948df3811e733c61679aba41e86021396df7a1e99048e5ecc19475c31b232fa7b689129acbd90842636fdb93cb","ssdeep":"96:83So6qPdTGNT9r5z1cve4/LLdmknafQU6huGLCav0:jYsLz1c24zpafQU6huGL5c","tlshash":"7f916bdb05cfd56cd925a8ab69132a4ac4a834d952ecefc85d28504a8d42d37f0ccc9f","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.98898Z","times_seen":12,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/tra980693d.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.288Z","timestamp":1782148140288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/tra980693d.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-a5a2\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhY8qIAsT2F3RN0HIsL%2F6SZMUhb0rOSjaMk9geoyrhZEyIp4ZZMT8W18KIFDBjTFYdHPi%2FTU6JdjFZ%2BIGNM3XUnFo75Sjd6hbkfofBC0%2B77TV3FDkZLRmHfQzmy4HJ%2BMySjNvwc9sQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb4deaa5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42402,"size_decoded":35724,"mime_type":"image/png","magic":"PNG image data, 1458 x 972, 8-bit/color RGBA, non-interlaced","md5":"ea9a979dafd4239b8688f64510dd26e9","sha1":"178dafa36af6b166800e22895b27265223a9e1f8","sha256":"a980693d226cb177662d6d1a9f3dbad754d3d13fc1aa042dc5d6eb31c6bb1c3a","sha512":"fc85e2f963c8cc6a81099d2bbf29103323d5e21fd3e7123f06c745af070a9611621111b9a376625a7bb84d3d0447578aaa90b74d1ccbd9e6ce71212bcb2269ed","ssdeep":"768:u7cqCtyQKjwJVuqpVtTrUQW0anKcn/mpt391+XxrQdU1F:u7cqCtyQK8sqpVtTkPnJn/mvaGdSF","tlshash":"ff139e1f873e5185f782107f6c372b18813effd86a46770f854da42e2e293ce52a6168","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-07-09T23:40:40.976483Z","times_seen":225,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/getCategories?t=1782148140280","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.326Z","timestamp":1782148140326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /v1/api/forex/getCategories?t=1782148140280 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BoYE5RFvOUXLDLAr5xKK%2FxBAKUdvVqaLCP2DvYNbfFdmWtZEC97pb0x9hBWWRb2m9wDb0vwK2Zi4NS5fNlL%2F%2BCN3m6gcfunY0KtPTFo8%2B%2BEX9bTyX9o860L4DpOAGwJVoC4hty01fc0%3D\"}]}\r\ncf-ray: a0fcdbb67d33569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1622,"size_decoded":1370,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b871b10e3da2312834f75c1d050436eb","sha1":"052811b8f19383582dce8e79b4358253d59f6523","sha256":"aade7b2e83a6390eff4fa5ea8b28102d5a16060eacc933cc8e0e36ad847792d2","sha512":"4631cb7da8cd0f87aaf8e56b8f0471d2066850a01b2191d781173528d80f854e5cdc6f7121d6790ed1abae630303821000db2e55bcc0d03796765a2f310c6276","ssdeep":"","tlshash":"3c3103042f98f8cedc418d6c26b12d7fb5090a7f93416ea447cfd43e72aa9b52e92484","first_seen":"2025-06-01T05:36:04.731096Z","last_seen":"2026-06-22T17:13:22.549174Z","times_seen":67,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/kline?forex_id=106\u0026period=1min\u0026from=1782118140000\u0026to=1782148140000\u0026t=1782148140573","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.883Z","timestamp":1782148140883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /v1/api/forex/kline?forex_id=106\u0026period=1min\u0026from=1782118140000\u0026to=1782148140000\u0026t=1782148140573 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBPk5eWSMNff2YMDkzpcS%2Ffkq2yvJZT9HQ04ETuFTn1rsaNKzW4ymHVzkg6dl%2FDmdFIGO0ZS%2FqyGFT0vbc3boBPgF3mDCfhfIBg3JS5NA2%2BgNpKq70PS4NYEOxZasadg8eZHxaqSgrc%3D\"}]}\r\ncf-ray: a0fcdbbafe21569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74176,"size_decoded":16440,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"37b1a1bff492a81e941a04c0623d1fd8","sha1":"147137eb8f8124176c9e3af267e7e2a790c60f1d","sha256":"92a05411d869f6b5ab689609eab2864669789a0f561ccefb577329d7d29fb48a","sha512":"45c24afd420d3c34849d48859cd92888c676fd714e9d636b5e969c985b3ffa8e6759a586ef7530a8afb3635f046dc0bbd4183201763e0810f0346c29397489a7","ssdeep":"768:ZUCremtmKmr9nTNuRmzuaqwrc3koNmOhgpHMXYkio+s5/Ji:ZJIjr9nTNem6ZIzz","tlshash":"b1735b5852495564c06abadf4827bce8cd3a77dac7f65f8e66df8c2320f002b314ca95","first_seen":"2026-06-22T17:09:36.661106Z","last_seen":"2026-06-22T17:09:36.661106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/54ca63218b8e3613112a6275ac5e5e93.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.887Z","timestamp":1782148140887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/54ca63218b8e3613112a6275ac5e5e93.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:08:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681dfe50-149f\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIgWNfPRtkEI6Aw0qPKd%2BN6vzaj6YyQHk6isYWwBlCms9rYGpUlWmINrcqEe1GcQoPJ3MxIPjMqLngA6SuyIKqpGz5%2BJOzye6WIDQ8cEjPwEAC7tEwbrdcE%2Fcc2G3RQ11zKaKGO29A%3D%3D\"}]}\r\ncf-ray: a0fcdbb898531525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5279,"size_decoded":6060,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"5c6928709eca3eea7b6c98bdf15c2aa7","sha1":"3c925ab9fd8d67d85a5b06ac3ffb1f082d11ff0d","sha256":"0e32faee1c0c8b2825923a8e3d7f40b16be2c675b6edd491c2464d4cf1028128","sha512":"014c076cc4abea82d89b6fbc51c47d6c86e26407083fe40caff5b8d22258d33c8bb76b1d79ccc2527c67404939fd02dbbbe2f9968ba94fa9642fa8e78cf87767","ssdeep":"96:7UluL95T84lq2ZQXnX+3GEAztHYyZ91ZvTIL0Qy1bE:78uh5TSX+3Qh7ZvHQ+I","tlshash":"83b18d891d0a6eb0ffe7b70eb2b06083b1434d9102d1aaab60d135b7aabc9105a551e3","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-17T15:54:13.653018Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/dbb606daf41c68f370b1a52cde61861b.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.901Z","timestamp":1782148140901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/dbb606daf41c68f370b1a52cde61861b.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:33:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e042b-897b\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXlQ0IqCB5My8w3TqRGQ2MQL1%2Fadbgh1G%2BsmP3TgvMEC%2BzQwvDqcTeXDRhByVq8SS4tsx9hpqowYwxdduvBAPP8YHI2qQaI21Blm0ol7lNsXUuBUfCzm8DCu%2B5zIcklPRNYcEEM5kg%3D%3D\"}]}\r\ncf-ray: a0fcdbb8a85b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35195,"size_decoded":35910,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"44a4bbb868725e8fb2a15e7447fbb1db","sha1":"167780adb19404358bd7c23a8a1b9044d2f9e48f","sha256":"32a79ef6ba2dbdc9f80b0d2d6173eb128b69b594d72e51772aa2c56851b14af0","sha512":"7428d11042ab827383c1d371761ebb1793085d36ba7d117081fac62cb2230d00ed060c01bb960de7606acffda3d6d4296d6202982a73b5a67a58a876ad447cb8","ssdeep":"768:C+KHwCJ/UEb8kcRAwk6JsA9M1CIdKLBhBR2sfF6GWMNV2b:C+KLJMEb8k3wkGDIkVzWy2b","tlshash":"67f2f11728c1d8cef139e75ba0c1ac026f7eb8055719f046af539362e2526cf8d469f8","first_seen":"2026-03-16T14:28:01.83601Z","last_seen":"2026-07-09T23:40:40.955729Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/49828747301c45e21b047740a0c50b60.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.908Z","timestamp":1782148140908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/49828747301c45e21b047740a0c50b60.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:31:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e03ad-16c9\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FT1e4Paq1vNOdTPofhk0H8KsFv9H3pHHR80wZ4fm9gk8T7DAHKLScOjRV5k8yFsbxfSFfNesPnxrQh%2BueGPzNe0%2BOJXcZsL6s7rE1gIq9Vl%2F%2FFp0cj4Oz0IqRcJmq4KzUV%2F2lL8xNg%3D%3D\"}]}\r\ncf-ray: a0fcdbb8a85f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5833,"size_decoded":6620,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"8b09e6bdb8c909cafd586a3481e19f4f","sha1":"433a5d945968ae98815c4585ce8574180f098cb8","sha256":"3f80fdf2072a43180879b4afbdcf88858be275f03a5240130c89c664a67e9214","sha512":"bbf06787c521e6450753e905ce515d98fcde641ff0e2536322654dd3b4b0bfd9f5a4e7d89a9699006cb867dac23a285518564c6353d65b8a3740f7ce8fd5b3c9","ssdeep":"96:Jf2VfuHWlknU9DTMEbYtyAP/azduRGZrSjskOY4+qyg9CuMg2ap9N7:JOpzGnw3U8AnazdL5zyqR2Id","tlshash":"98c15ced69c3deecd927bd71032205aeced62c79bbac22151790cd91bd44d1e312a620","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.975368Z","times_seen":11,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/chunk/vendorec61e529.js","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.740Z","timestamp":1782148139740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/chunk/vendorec61e529.js HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Jan 2026 21:22:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729525-11fc82\"\r\nexpires: Tue, 23 Jun 2026 05:07:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 90\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TESp5do3ZSFHPwwMKYuYVB%2FFEH0vohRPz6IIOCItcLyWFicSMSFMixW0r1MGZQKb0siT7jaGqSw%2FaCdJSkJfxodw1Tt54Om04qdtD8k%2Fl%2FmKU5RAx9CS4aIr6icrAYigYnmYVILd7w%3D%3D\"}]}\r\ncf-ray: a0fcdbb16da95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1178754,"size_decoded":395780,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45721)","md5":"0296cd481f9fd536f96094918f8271a8","sha1":"8d576832766a22a93f814700924b26c46819151f","sha256":"a5327ce29aea5328874139f297e153cd92853e35bc121be34b2185cb182ef2d1","sha512":"1d5fb3f099e6322ffd297acce3ec320aa3d493b06589932cf5f439e19107ce2d1a07d580a6b9957c6ac9b231d638ef8a221e7fab779ff227fb2ea2ba2e273859","ssdeep":"12288:d32mv9r2OExkZPjF/Cbg3Aoi7iyBvxDCIP4kQ4/FpIv:d32mv9r2OExkZ5Cbg3Aoi7i80IP4H2/g","tlshash":"cf256ee4b995b46c877785d9107b1002b33e3bacb44d84a0b1bdd8a9296bc44d3a7f7c","first_seen":"2026-03-16T14:17:59.712915Z","last_seen":"2026-06-22T17:10:35.522593Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/entry/indexe1910c4d.js","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.738Z","timestamp":1782148139738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/entry/indexe1910c4d.js HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Jan 2026 21:22:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729525-3da16\"\r\nexpires: Tue, 23 Jun 2026 05:07:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 90\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2PKMvqMsNeT8zDgbUrJibteMaEBO%2Fht6J6bZ%2BkSN3vclzqWsaHcp%2BES858N5%2B%2BAKAoFlHgB2LCntwZ8QO88uuqlhSJyvq%2BPQgHlZ3BtUdb%2F8qyTNDB3ogZNvfYTFsYPXzK%2BK7s%2F2Q%3D%3D\"}]}\r\ncf-ray: a0fcdbb16da85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252438,"size_decoded":97911,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55942), with no line terminators","md5":"53be16e72cb5d629a4016e907dccfe5e","sha1":"283823017b6eb8004f3e874e5cf1069a1d587f70","sha256":"7d3c491451fce6873af20360227e11155d5e12fae98990f7ee3b8344f8d396ca","sha512":"84d90b0c86b0926799fb4e29f410aa1c9141ac60c5ca564cbe5cd36e9193212be46d524ed47b8502621379c75af411ee94ce2f189bc7a58b0f5c34542384a1fc","ssdeep":"3072:cKgI8uZvynLmpjr0pgnSxcGvT0ISSdsUX30f6M888AqwCvvkIUsyE/rdd99f5gBY:cKg6ynsygSuGvT0ISQf8LvomS4dioQV","tlshash":"6a346d2956a9748d18b6e60ab5cf3e3454d82cf7d785c8c10af885e902f2d2753a2f3d","first_seen":"2026-03-16T14:17:59.73128Z","last_seen":"2026-06-22T17:10:35.53514Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/company/getCompanyStatus?t=1782148140055","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.060Z","timestamp":1782148140060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/company/getCompanyStatus?t=1782148140055 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xML7Q%2FBD5Nz51sO9hhNlW9Dv9adqp8kGBIDfkllADNVN%2Bj3eIzAUw9HcP94%2By9KTzaAnvlDrPrLUgbgcdUmJGbWTmfFpV7fNo57VFq3QLGK%2BX3H0xagclEjloKcfRIu2nmpYIS%2FBID0%3D\"}]}\r\ncf-ray: a0fcdbb36cee569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":679,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/abd015fba10f5495a562cf5f9e8660cc.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.862Z","timestamp":1782148140862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/abd015fba10f5495a562cf5f9e8660cc.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:43:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0691-964b\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHkSswv625rbIfKlZnUT8g9ot5bAnORcZ%2FCnVVP6lmzGOW2pX%2BKTEifYoAuVm3TqE2bTeK%2BDe7SdJGM30iXaegyUlBrZYjKkE7lxnj%2BZWlPFmLK0V3MzbHfkxLOyO6LNzlc48DB4zA%3D%3D\"}]}\r\ncf-ray: a0fcdbb898571525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38475,"size_decoded":39263,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"2fa814e44a84ed51598f230cc96a6ae0","sha1":"de2cdecfc8ad9f52b02d75de21aff3f7d7dd187b","sha256":"6780ebf165531352588dd613472b866fce627f664012c11b3cd8b84cf5e8dcd1","sha512":"c53bc4e2d70cf21ef3759c39d46c7fa74ff4b57ad2b4058a52990af1548aed487afdbe30e5243feb2bbfa25e198e2ce7aef9ae0ffa6e197d6a89d7121016ccaa","ssdeep":"768:fe1IVEJtxHGGS1GKf8YTx9o+rrPMdt4GweCwZuutp3QzRjzsmzUhO9gto2e:QIVOxmGKn8YTxC+30Pw4tAzRNzMSKpe","tlshash":"2103f1eb8c5fca40dc1c88daa6c554226844f34e16bd3a9c4821b8bad73dd7eb65c5d0","first_seen":"2025-12-08T02:24:43.743522Z","last_seen":"2026-06-22T17:10:35.500195Z","times_seen":12,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":14,"receive":11,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hytjtyreygrjhtrjher546.cc/uploads/20250621/5c7a71a45daf60e6f0b57f257f91b96b.jpg","fqdn":"api.hytjtyreygrjhtrjher546.cc","domain":"hytjtyreygrjhtrjher546.cc","tld":"cc"},"ip":{"addr":"104.21.54.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.918Z","timestamp":1782148140918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hytjtyreygrjhtrjher546.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 16:04:44 GMT","end":"Sun, 20 Sep 2026 17:03:26 GMT"},"fingerprint":{"sha1":"16:08:80:58:B9:73:19:A8:81:1D:6C:33:D3:F9:D0:4A:9F:DB:58:C8","sha256":"BD:8C:13:91:6D:DD:66:01:9A:58:E6:54:44:FE:44:5E:1F:DA:59:F6:35:1B:49:BD:DB:7A:FC:7D:86:F3:6F:92"}}},"request":{"raw":"GET /uploads/20250621/5c7a71a45daf60e6f0b57f257f91b96b.jpg HTTP/1.1\r\nHost: api.hytjtyreygrjhtrjher546.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 12:25:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6856a4aa-53e3\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8nMLtA3dPkugI6tKJgQ3LL48vKGg6EVIMJVffTUPUW8lDRtSjCgWHi4DfqN%2BS1mIBm3lAQPQ0DKu3s7Ki676ROKt%2Bi0RVnyEwU9THXZ5W%2FTG7LnanjNLQIKEDpUUTZy%2FBp4eHrIcIyOPIABWKJDUg%3D%3D\"}]}\r\ncf-ray: a0fcdbb8f9ab56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21475,"size_decoded":21699,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 325x410, components 3","md5":"73ef3b8ffcafb84152534acfe239f231","sha1":"f5351df6c245e9e28cd4880fbb5e7fd28aad5db3","sha256":"8ba2e70338e7cd9484c600f5d31c19b377b9bef889eabe28ed36bfa0fafc394a","sha512":"2f535d4eba5ca0390b270afd1daa5df49987a1e80bd833e46f8d7aed1c9372933fe9fd07c59ac1285cfffaa2db68504a3c2484c02ae7c62b28026a1c6af4395d","ssdeep":"384:mP1HJgJVACcRZhwp2BI2wqiuvl7HRQUMVjCTop9w8lo:mPDgDiZa27wqiuHg2T0zlo","tlshash":"bea2d10010f243f6b636586136d7a1ef8eaadab4006d694bb5637cfafdef11b41d4068","first_seen":"2026-03-16T14:18:23.307838Z","last_seen":"2026-06-22T17:10:35.517603Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":8,"connect":5,"send":0,"wait":17,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/user/info?t=1782148139240","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.259Z","timestamp":1782148139259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/user/info?t=1782148139240 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://m.exerecetpxiexi.cc/\r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4mfnRV3ILpLKC%2F%2FJhvMAqROftCNmDhgOMomzLxwha5VGaZYhKVPyCJIzef4gDp22EQ4Gk6n0E0Dn5dhBgfDnGnxp0LJTaFEaTMp3d%2BxXBgdEJwk9nXfNVedDMF2biAv%2BQv3OkivUE4%3D\"}]}\r\ncf-ray: a0fcdbae7f505a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":652,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.exerecetpxiexi.cc/v1/ws","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.053Z","timestamp":1782148140053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /v1/ws HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Hs2LOZiZDg6LDJX5nNftnQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 22 Jun 2026 17:09:00 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 95Gh/wAofpo5UhNmb185yzUU6Tw=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XT1P%2B7VVml2PWjJlAh8OI3Ne8c%2BipN0I3XsDCjIJR4p6%2F4gohg0fVmbSJHPgmSbtrLYR4MC01ilfM%2FyujevToP5DH7iZQB0VB%2BvSjJIy5jL54CrcLJW8w5UtW%2BbzsSkbjUczp%2BRBdSU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a0fcdbb36b8cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":613,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":420,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/loan818e7595.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.266Z","timestamp":1782148140266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/loan818e7595.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-1104\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVZ5fbjtNX06LAR7hrfDuWjFAqr3mkso2dib1Ss%2BJfk%2Fy5mY1tsGnxeqU6%2BneQzJCDSCTzckQq2DfmLk8iXTZm11XoUM%2FrzUP%2B3RVlG7jd72vNv5g77gqNKpbY%2FpW85hYr3Dxcj%2FGA%3D%3D\"}]}\r\ncf-ray: a0fcdbb4ae945a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4356,"size_decoded":5044,"mime_type":"image/png","magic":"PNG image data, 68 x 73, 8-bit/color RGBA, non-interlaced","md5":"e5f7c7bab9f5b7b88aec4bb13fb50a48","sha1":"cf2c9f2610f66bacb065c95a8b84374211c4f820","sha256":"818e75953d7530e8d3734e29f39a30e667c266a166c4342f71da26b285accd43","sha512":"a5a0aeec7bad90dd084a60404859f853fbf89eb1dba0f0515eaed44d6685beb5f7bf94ced8ec875b22a5b3785b3047be0a3dc9cf042afd730d437f8758b7baef","ssdeep":"96:IL8vwMmhTybb0fkF5yRmjyKwA4SXOTDt++KVvmGDpQAb3x9al:3Ts+bbxFQkF+TD0+KVeELz6","tlshash":"0c917e067d7c5a5ee00c2131268794c396c385066f4c0e8e73bd5abd8b8555f42fead6","first_seen":"2025-02-05T17:00:50.060774Z","last_seen":"2026-06-25T16:57:57.890955Z","times_seen":94,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/en140ceb36.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.268Z","timestamp":1782148140268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/en140ceb36.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729526-b18a\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkbMT3ZWmR1ig%2Ff6GGg7MZgB6PVZ5bvrSa9ivVEPyLNz2r0lR4OlE8ZOqU4iwZ%2FAmUBAWYEDjJoh8guQ3uZMJyLgzcLz1hY1GXf4HZ9hAQ88FCz6NHsBf6yo1C0Aqdow%2BWcoMt4bkA%3D%3D\"}]}\r\ncf-ray: a0fcdbb4be995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45450,"size_decoded":40311,"mime_type":"image/png","magic":"PNG image data, 1280 x 674, 8-bit/color RGB, non-interlaced","md5":"bbe24ecfd14ccaf03c3d2e129dda43f6","sha1":"d94634c905fc9f686c9cac6d34b28d7b6bfccb6b","sha256":"140ceb367bbf5b758adeca9edde1a0997636beb738f25e8c58aa8ad4fc0a8b67","sha512":"f429befdc35dfb252955c62c0c7d34f8328ecf78cb30046e7c3805b6321c8d0f1b562a7fb1f7f499f22f149318f7af96f60b3917e6a48289e77515b6cd3f38ba","ssdeep":"768:LDHOMVkhoc/xNEdxnencUk3ybpRL6zuiptHAV3YmYFTukO:LDB0oc/oGncP3ybfxirClJl","tlshash":"8813c03cf8d2b791d11c8937a0d62367dd325e5d2058cba30b09bd256ec0d668beed19","first_seen":"2023-11-22T06:43:07Z","last_seen":"2026-07-09T23:40:40.975987Z","times_seen":217,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/f3f48a099b71d62fed0dbda60d70e967.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.875Z","timestamp":1782148140875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/f3f48a099b71d62fed0dbda60d70e967.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:42:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e062a-193d\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Vhh0FKTARK8a98AMSrQWpLRFtbFEKdXi4CipdWhp6EAGHw0Ql03Q62VlzqDHIx24K9k9tTZqVsWzTZ2tkCgOkWTk6zjH3jCZcU8ax99j90QkrJDY5csjFu3vWbB711XSu4oQ08gOw%3D%3D\"}]}\r\ncf-ray: a0fcdbb8984d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6461,"size_decoded":7236,"mime_type":"image/png","magic":"PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced","md5":"6185ac986137e83937dd68ae2348c0ac","sha1":"e12cc2b02f7589d6848103a507b42984466cb879","sha256":"2d1b7d953570f71ccfddf006716493d066a4492ea509fef506dd38e47804f6af","sha512":"cf3050e3a24b0e8320df615f6fe18c3c7f63fb043b0d7bfd64862cb44f954998ca273e7b881ede0790c49281dbe89ceb7d1186a417d9c9fb6bd471c66ed93248","ssdeep":"192:NbYUddORpKeaP9f7l5fU8xIWr/kXRpoYS:NbY0SIhPR7l9UkjkhRS","tlshash":"16d18fb457260e08b94ed283d2c26ad1f56c3c2e9be4b922b0c4c403d5addc68ed39d9","first_seen":"2026-06-22T17:08:08.095482Z","last_seen":"2026-06-22T17:10:35.535818Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/d636a99cc5901548ad406aaf4cdbbced.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.889Z","timestamp":1782148140889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/d636a99cc5901548ad406aaf4cdbbced.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:31:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e03cb-8bf5\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46HFq9rSeCc84Xrz0IoofBsM9qEsjtWWYDF%2FfYAejwHI6ZzNLgYQprwD2GQomMNwFtwtPXIgGFaBEDlZxRzZGv1aiDE%2BPG9kPd2EBzaRcpxmTqlsuw3mKVWSX2sTNQLgsuq%2B8zvdGg%3D%3D\"}]}\r\ncf-ray: a0fcdbb898541525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35829,"size_decoded":36615,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"6f3dc23b14e512a9ef9841cae064c99d","sha1":"acc400ca7feb32731b55f2a4b23394a41e716a33","sha256":"c570c736a680882cef3deadd432e4b2bcc8291bd53bc829d9e1f5cd2cbb3da58","sha512":"8453ec4de33aaee00223eed431301e2e234c65924d50555892fd4185e6401c9d23b035031b31104eef4d7abab375e9dc886c477ef1c337f7106a0057422a93f1","ssdeep":"768:g7qAs4MnkFVI/Uxz27xY37+LQC/BPoA+RTIhdkuwYvwX7bKwjfiCPV+she:g7PckFm3S61IGkuvwXnKwDicJU","tlshash":"01f202e17adf4dd3a136976ae94d54b1a9e912eff34f14f2db62a53020cc12016d31e2","first_seen":"2026-03-16T14:28:01.828078Z","last_seen":"2026-06-22T17:10:35.527591Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/trade_list?t=1782148140059","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.070Z","timestamp":1782148140070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /v1/api/forex/trade_list?t=1782148140059 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hckGZcVfz%2B0zPyyQ1P2EmwsiODo5SmAzCIwMUCsJgMjUcv6ibalRnOoLUi6ISLObhRCHgusWwqSrbtb4JzWUaeckxHwhB8MDgPEEabgzV2BY6GAtBotX9sAV%2F3RDvO6R%2FYpniM3WLw%3D\"}]}\r\ncf-ray: a0fcdbb37cf0569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":675,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/fafe2761da.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.300Z","timestamp":1782148140300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/fafe2761da.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729526-3b7e\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgCbzThrras9FgZhOfsmI1oD5vZAuApEnDYJwcNphBGK142Pp3sFUpxiX19oKe4EtB7L0rYNppGENMZW%2FGCnvmyQje%2B0HfrPO50M6j2YfjYXn2y%2B1yaoV2F%2Fg2NRbo4YcklzF3akVw%3D%3D\"}]}\r\ncf-ray: a0fcdbb4eeb95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15230,"size_decoded":15669,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0da21693c4e3126b4041e783faacef31","sha1":"4784877c0d4e7a77acf68a34dee911307b5f4ded","sha256":"fe2761da833401cb87c836eaed2867f3814d470404b4f1fb074025211e880e4e","sha512":"96c4f7ad0aaebe268e9cf30b156ffa1606dae7c7a4be9697cb2fde0d7af46a6c90ae0384b83fc45921b435f671e0be2c3b35f12e33d70c83b83d7231d92634e3","ssdeep":"384:skysUIK/SJlE7tfm8dx/kX/PYdzLhghlj62o:8sUpMaMQBgCSjG","tlshash":"1c62af06fec16b90dafd18fc5e6819ecdbd80e811589a97b180e6252c36f889b7c3c51","first_seen":"2025-03-18T01:53:40.095386Z","last_seen":"2026-06-22T17:22:23.261571Z","times_seen":44,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/spa84479ee4.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.283Z","timestamp":1782148140283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/spa84479ee4.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-20c2\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OE6%2BRzi3SOuS1Uhnk7stQqUzKVn00dBUPFQhMvp3%2FfZMw9jPoU8%2Frpa0CaPpFb2cYlkL2NG8a17hJV2YRLfyoBNNaaA3Oxzpx2ayjgsa%2FoUJS58sGPbYLjdB1Ifu5NpzGp%2BGMzmbQA%3D%3D\"}]}\r\ncf-ray: a0fcdbb4cea45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8386,"size_decoded":1414,"mime_type":"image/png","magic":"PNG image data, 1458 x 972, 8-bit/color RGBA, non-interlaced","md5":"e6245ac0f8da16662b1f8da60730027c","sha1":"0f1560e6bc08b0e94bc258fbfca0c7210bfa448d","sha256":"84479ee4cd16a169c8fe1ed2e9dc4603a181a4167d2b6f68ba8eda2d86e452f0","sha512":"18099200046d11315551bd0a2c2619f99e926bcb7c9ac1cec1f019101b447376bf5a97bedf74ece82e3ea6c6ce7bf3b09f943dcf50ff871d38c2e55f477f2087","ssdeep":"24:LJeuhVu/KeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeU:LNhVuGacVOIhxEBei4yMPMJtJZ","tlshash":"8d0257fda316a061fc4230b77823e130a67a31eb451fab5be519b0874a0f5ff91a0548","first_seen":"2023-11-22T06:43:07Z","last_seen":"2026-07-13T15:53:04.500625Z","times_seen":244,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/default/setting?key=is_show_mobile\u0026t=1782148140282","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.353Z","timestamp":1782148140353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/default/setting?key=is_show_mobile\u0026t=1782148140282 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95gc%2F1yLyabQtwk6xmJ2L5Casl5DZgMyajPEKmeixRuCDaG5Znx%2BfBtPxueUB3%2FMfU7ljmbjivRT593YyXQoIrKdyYqVR26WbIvMImpYNV79%2FXiktsDJkSwHdABx8PO2sLiW%2BJIfpRQ%3D\"}]}\r\ncf-ray: a0fcdbb53d17569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":679,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/035aa85552b7ea8c4bb41749e387edc5.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.890Z","timestamp":1782148140890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/035aa85552b7ea8c4bb41749e387edc5.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:41:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e05fc-a764\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpaX4uR5M3TK045%2FYlFUjtwOztuHP7sB6QrYA8HAAtTcp1Q8DVCM7EBWWizjPM1wEx4XXMRMPtjbWu1t58mppKo%2FSIJAUItNyZL9FagOHOgjKrwmyUkBX68P2H%2BJJrklO8vAlay2yQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb898551525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42852,"size_decoded":43549,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"c2fe3ed0c7eaa2cf908e9f7bf706e9e6","sha1":"75e672568768fff933f7efbd8066c39bfa0cdc03","sha256":"0cbcfff86803684db695a63588bb3f51c0f4ee1b9b4af3383f6dd0a72207be73","sha512":"d4afbab6af382b7c1e4731170cf6cf97508f35855bb948aea023b59e60ccd83f67e28478f2c0671ce357b0cf7f26b2972eaa9f00a4339f711d766635c95408ba","ssdeep":"768:MUULV1LOUl6OVvUY2tqE7diTZN+PkJXxsCBtWtuCo6HHHhOM6NPqaHBrUcL:MSUg6MHtqE0948plBtmuCouHHh9EPjaW","tlshash":"0613f117cdb58392538c42669410cdacf57f3e96dad28bfa18f93203d6af1c858a2d71","first_seen":"2025-12-08T02:24:43.724272Z","last_seen":"2026-06-22T17:10:35.4934Z","times_seen":12,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/5918df3b5e73dcb169e523df89aa7f1d.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.902Z","timestamp":1782148140902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/5918df3b5e73dcb169e523df89aa7f1d.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:29:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e031e-1137\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dOIWYJbJLXB0Ondlei0wS4Ar8i8viAgv%2BuhtLsWSbuRPx3GpPbmOfrvBh1vBxdsvSdGvPmGLnzkH9OwhfcIOxGe9sZOsHJdZTawHov2OJNAhJgVYDpIN2E4rGCMXHpiwMa52roZBg%3D%3D\"}]}\r\ncf-ray: a0fcdbb8a85c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4407,"size_decoded":5181,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"96624484358f67c803884608ddb80e02","sha1":"bf6ca0eb6ebfcfaadf670c1d958fd88a6c300275","sha256":"29b154ade13da1dfbd6aa78deec2ec778f26c05c4dbd5e7a0e027a74cee2fcdf","sha512":"5a312cbce7430df5884e244ecb599691053640064e28fc0e0d76347cfe3120166cf8834825a83bc4c58f51efdf59c90ad1afec8e19b51ae0f3ecc88cfe37d22d","ssdeep":"96:qkkYamLwlpn6SWsR9sa50ucIw6sqVmWqzpPh784fmT85ngAO7:qf/mLgrWYx0qw6CtzpPh784xu","tlshash":"f5915b7ddb305824148f1bd5e106f524293f266aa589ced40e0359b17b8de07bf40a2f","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.946947Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/kline?forex_id=106\u0026period=1min\u0026from=1782118140000\u0026to=1782148140000\u0026t=1782148140573","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.921Z","timestamp":1782148140921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /v1/api/forex/kline?forex_id=106\u0026period=1min\u0026from=1782118140000\u0026to=1782148140000\u0026t=1782148140573 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:01 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eDUQT3JgT6ole5d951fBOio6VTRhuheclgwHMLHxuV2jdPAmWeKuI%2Bv4pHeQJHESRWfsAjGRFx1w7PtydNWYkIwUt3g28vqjuCq7mobA5FayuhtADQA13V4mrEiVLeON8j2PrVCp5c%3D\"}]}\r\ncf-ray: a0fcdbb8cdb1569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":671,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/hi58747bf8.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.292Z","timestamp":1782148140292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/hi58747bf8.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729526-fa49\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7U4xutV3t7sVKvw%2BwIq%2Fw7yPsSQkNRF9iAh73fLvmoDVj8FydMg%2Fjt2AhF%2FHxp1AvlcSXw4Oe93nhBMxKnKBhuLaGJN%2FtpBcPHrBwtxicW9fLXKY6WVCgSMpBNWxZMXBk%2Buz8LCoA%3D%3D\"}]}\r\ncf-ray: a0fcdbb4deb15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64073,"size_decoded":58352,"mime_type":"image/png","magic":"PNG image data, 750 x 500, 8-bit/color RGBA, non-interlaced","md5":"fc59785f1d5f12d0fad6210bc5093836","sha1":"520a5e0982dbb792eabd13e980ba260dd3cee46c","sha256":"58747bf8228b1993e20c20bfd2b9503f13736668dbcacfed7c5d920f95be7fa0","sha512":"80c0c30a001e0d220d733de336a3f0d93f24bf8316364166bb9029f5ab127d9d8dc4be38c8a19e6f15180db1beaf943d0a920a539d04dd1471f21b7a6ad94bd7","ssdeep":"1536:QOwe/VDLT8+hWFSjGvthJGLEqb8Z4gA3MKvT8xRGvFct73Q:QOw4Zy7vt/A1wCMKSRGvFcp3Q","tlshash":"0953be51fac9206187320cc52b8f7de1e169bc5b6c2f8e2d676559362e0b0bcf239d51","first_seen":"2024-11-21T01:45:06.76679Z","last_seen":"2026-07-09T23:40:40.977081Z","times_seen":66,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/258291acd17741e5ba12e0288f0653b0.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.866Z","timestamp":1782148140866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/258291acd17741e5ba12e0288f0653b0.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:28:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e02f9-4876\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZ8gson984o6PxWw5mLy29w4ypFaxxq1%2Ffo%2BznZ6GkZMwLbnbFWVD4%2BjhdVbTubSKuhSMb09AGD3MxNIHTU1pQxkYxM6nWDQMTBpXmAjC%2FLIFhoWg1Jiw7Vg0ZRf88UeNZvmftBjnw%3D%3D\"}]}\r\ncf-ray: a0fcdbb9d8a51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18550,"size_decoded":19333,"mime_type":"image/png","magic":"PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced","md5":"29299ea8ad13103aedf40c267eb3e545","sha1":"c8455ab36b07222da0c2b85d4a168dd841e36ab2","sha256":"ae7e9bda902a4cc490ec38f825cb40c85be5d5abcb483dbc09e7cee737483aa7","sha512":"3f2adc666eb0d8ad29c0ef0f370f2424e36b3f7766d300f29d571743fe160c3a633645cc06084f8132c74b6538d43f59da2b6253f9a8658d62f8e953f5026454","ssdeep":"384:I3cqt0Z/t/AyhlVjgPaEiKDLDzlHfToaW15g/IOQYV3mEH:HqC1/PJsPaE1DLl/TE5gwo3mEH","tlshash":"0082f18369d5f522155315a19e380a60028cbc1e8d1376a4d5be0bff8d990e2cf3f0ee","first_seen":"2026-06-22T17:08:08.081091Z","last_seen":"2026-06-22T17:10:35.500971Z","times_seen":4,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":10,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/user/info?t=1782148139240","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.249Z","timestamp":1782148139249,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /api/user/info?t=1782148139240 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/id4917741a.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.289Z","timestamp":1782148140289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/id4917741a.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729526-105e\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGshu5A%2BUSZwtrHz0QqMLmUTxHMKa1%2BBa12yM2w6TFJhfP90hub0J2lPqfZ7ZrWWVk5FW%2FC%2Bjo8EDCELnECoLXXLwH7fgHSZ4roGf2rrf8kh05RZL8XrMeZgWXBWU557jHfpT5%2F8iw%3D%3D\"}]}\r\ncf-ray: a0fcdbb4deae5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4190,"size_decoded":1011,"mime_type":"image/png","magic":"PNG image data, 1000 x 665, 8-bit/color RGBA, non-interlaced","md5":"71499ce07038e88f422fedfff05b0840","sha1":"30b4191941bec4643183153f1f3812d66697daca","sha256":"4917741acdecf2a08521949978ec90266afd014fbfac790751e2406bab84b40c","sha512":"6733e1b6a5b02bd141dd9546770bb51532d20a2b3d6b80694cdf8a2f2a52f1c9424f466589a42635c7690f64f9414719d637ffcf61c0cb9480cb99821c2e6ee3","ssdeep":"48:L8v3333333333333333333333333333333333333333Xd3333333333333333334:ic","tlshash":"4a81224af30468dad1dc5b6a98231d7bbeb4410687b38d0d4403a29bc84ce653d97d89","first_seen":"2024-11-21T01:45:06.776093Z","last_seen":"2026-07-09T23:40:40.98398Z","times_seen":83,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/my4290a0a4.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.291Z","timestamp":1782148140291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/my4290a0a4.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-5418\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58q56BsDOcu75o1VVOmqsWrOtG%2Fzf548byUWBTB7Q4pkhngRm53G8x3GPmMx%2FuJGHXIOi8xFnPqNbHvvBK4VcviVGStwm2csiVrflY%2BmzXL9ej8pBziQWM9gSfkUFenxHc1239lG2g%3D%3D\"}]}\r\ncf-ray: a0fcdbb4deaf5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21528,"size_decoded":15065,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1242x932, components 3","md5":"9054f77642db8d07b81926912ce25823","sha1":"f1594b5ad925741ed84e4a87639d02c991903599","sha256":"4290a0a47ff5caa8cfda2aa7934ce113a69cccadcb042a2e90df261b843a6f46","sha512":"6f74dc8825d53e6a52c3cd4d7b32884cf2ebca0c76eb97c070d8c99825421098dc6d4505bd7ae69bc99ce1f8d6b10e4dfdb99803e56cfafb569d447eea25f71a","ssdeep":"384:tYSVvk28iQpYfvB6Y0bb0dpS22Og8SA12QulFF1eA5Vk:tldfQWx6zb0dk2i4mFFI8Vk","tlshash":"39a2af632709cc41caa846b050ae5328b2dd07b6759254e6cdf63e2a2a97934ffd3513","first_seen":"2024-11-21T01:45:06.790064Z","last_seen":"2026-07-09T23:40:40.943682Z","times_seen":55,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/750249dc81397b60f28d28aa0c32eac6.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.872Z","timestamp":1782148140872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/750249dc81397b60f28d28aa0c32eac6.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:25:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0262-a649\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VnEuALVqKlQAwABByFrZGeWwCnmNn1vebIjp22q6Kr0CE2qthPmSAF1ZSB9cIU3jSFsphge72SHyf1%2BvksXyQG5Bic6plrku4OG3LDxSI%2FnQyQsWUtds8fK5TXZ2bGOBrVVT9zTAWw%3D%3D\"}]}\r\ncf-ray: a0fcdbb8984e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42569,"size_decoded":43312,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"d4bc4b27c4e78799d9f7a5447c5167f0","sha1":"4601608c851c370b28bea56c60a834e724d0730f","sha256":"8590e1b9404f7bfbcc6db6542be01b7afa927f915e6e6effdbfe1363c05624b9","sha512":"6acdaad10ef1540eb84d602f6f20486b9726d57c2b7967c55e602650f72ab83c9674932996df6391e33a983a7720ba3f02359b1eb62cec9b353a058fa90c4dfe","ssdeep":"768:T367ANN2C5I1F5bpFwp6BAr9kLJnNqN87Fs/AZrRoAsU7FaTXwq1nYG:T368wC+1TVBYkLDqSioZr6fU9MYG","tlshash":"c713e1ae9c2eec3b4ef2d551d36d2a32dd16739269b1b1d4643098255cd288beb4cb10","first_seen":"2026-06-22T17:08:08.118074Z","last_seen":"2026-06-22T17:10:35.501735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/efebcc1cfd4d74f97abf077f7af9847a.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.894Z","timestamp":1782148140894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/efebcc1cfd4d74f97abf077f7af9847a.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e05a2-1313\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XP18pU8OC34gWvj4TS7SEGXFIZ%2FVNaXIczvX%2B2WJJOnM5UQWpc2O%2FvkezCxz0pEyIVaO3b4kA0XHvB%2FgvXC1Vf2vG63Y1g6z4Krvu8KigLxlpbkn0mE1wIYYldcFaTxX8MvmXDdhvw%3D%3D\"}]}\r\ncf-ray: a0fcdbb898581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4883,"size_decoded":5666,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"02b89264b26d3a3507e8e99725d789a8","sha1":"661c601f315d6032aa3a437346ab8cccb11452f7","sha256":"ca39637a1c539a0aaaf7c6d19f197213fc6a88dfb713f6bfb5e9daa68ba1bd9a","sha512":"b6552591602e066d5effad94de93c564aa815bf5f0ca2d0a9918e60b59f75b54f32644f4e98458a649cc3e97abe2c324f4fbdc7580db3c6222a8c04c57a85111","ssdeep":"96:7BjtHONS/9HuLfUVe5apNLzGmTEHsDT0TlowP7:7BhHO4/2fUc4NLz/cOgP7","tlshash":"92a17ddbecf89e02366c5c68239336780cffd5382ba099676177440bb19c55d744aa9c","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-17T15:54:13.636165Z","times_seen":21,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/trade_list?t=1782148139239","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.247Z","timestamp":1782148139247,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /v1/api/forex/trade_list?t=1782148139239 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/ru9776c19e.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.281Z","timestamp":1782148140281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/ru9776c19e.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-1421\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4acHwqm%2B9TrsympEJmGX7BO%2FZjeYzUyg04M0Os%2FOWCx0WsSkDHSMfrdXM8lKoKMz2SVVz4InNFNAahK1SM%2FvvERpovAi4WRvl9PyfQSaFiCt%2FrRC%2FWts3elkWFU8HYz%2BQUHca0DpQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb4cea15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5153,"size_decoded":1055,"mime_type":"image/png","magic":"PNG image data, 1280 x 853, 8-bit/color RGB, non-interlaced","md5":"25037156513edecc307b7df26ce86da3","sha1":"2bcb7ca963fb0deb1616ecba74b0dff336ad9f10","sha256":"9776c19e1cb70b592cd49f533f90e7cbeb42e9f413e8e4d3255d6a5e39da4d44","sha512":"762c9cc6a236c33bf02400d9b3b7cc0fbab8258e9389a13cbb276894cff160d2a3e83dd772fd0a56f58b2c69ca92376f9fc21f2a01cc19464b852d0da44ed1b4","ssdeep":"96:6kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk8kkkkkkkkkkkkkkkkkkkkkkkkkkkB:A","tlshash":"5cb122aa9fa108adca25133cb7cf833e34735e9cb006871723c91c34ce8d10e1b5206a","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-07-09T23:40:40.923008Z","times_seen":231,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/trade_list?t=1782148139239","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.257Z","timestamp":1782148139257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /v1/api/forex/trade_list?t=1782148139239 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://m.exerecetpxiexi.cc/\r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leyiYRucBavBTmuoUfsUZbTEMAXLKv6OJ5M2OmHMnyDg4yNViLF%2F6Rk1C7h7Rs1UPxJfBxOHH2zaPO1ZfGvNMiWsNZ5WK9jUUgXmbpequRy6tDEPI2o%2B%2Fd8pE2nkeqdUf83k%2FAKAwZ8%3D\"}]}\r\ncf-ray: a0fcdbae7f525a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":652,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/3410f6ae6c711900a1781a4edd34b727.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.881Z","timestamp":1782148140881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/3410f6ae6c711900a1781a4edd34b727.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0614-1024\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEBR7j4EVg8IXZ%2BPNeA2kZKrVHTZJUe5ZoT8Fen7kpfJrNjCrmfnxQFfiVko7wbROMlOqacRWks%2B0BIasXShDnp9KXg4e%2FamSyTgWdBJNRXPoFEI3w8W5bdZL2iqyCoodVLgwrhkDQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb898521525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4132,"size_decoded":4908,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"46c9b63c0d6090a4b49cde0b6776a158","sha1":"4cabbbcd21455ab7688d0624589eac165e698403","sha256":"8bd2097f6bc3eec42fa93d515e7e8ca5426234322bd78692cbc668daea545f05","sha512":"47a6e692a4d2132db588d16c32116a26b27d888a32198ab5624ab46c8af0c4730c205a6bcc3912704493ad04a293fe5187105189de8d0d4e6ff5b83e23cd06a9","ssdeep":"96:IYEYW7qLzoPqtYxE0opyEDU/FU5Tm4sHikpfrM:3EYloPqOxcpf40Tm/ZpzM","tlshash":"c8817eb5a3300a71cb25a275ee27275ec563b61540651e253b5f790f650222e7033bff","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-17T15:54:13.636784Z","times_seen":21,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/a74bbc0010f1124b34afdf002063445e.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.899Z","timestamp":1782148140899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/a74bbc0010f1124b34afdf002063445e.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:36:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e04c3-8141\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dh3HbstRWjf4KOBX%2BJ3uSMhOIu1dK5n26N4jE27q2kUUGgjrQi7wBSHPizXawCZ5B0iLQD%2FbG6Sf7WJsl4i3M5X4QgMg61PBUpt0SInNF%2Fyxyy4tMmZbs3qS5a6ZEcbyBtWIM0xwuw%3D%3D\"}]}\r\ncf-ray: a0fcdbb8a85a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33089,"size_decoded":33838,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"7761ff4026a6b2399909ed8dd194c407","sha1":"14179af37aa2dcf73c3d33d353033870f77cb243","sha256":"d0757d0eaf365c5eb85f2afbe756a309b6ec5f178829b61a27100cdfd85d5fad","sha512":"269fea8fc146bd0323ea8f733148bbd34d55bbf4bf6a9abdd98f65908c0fb5826e679b44f1ec573a370240fe1bb3f7696c7d3f03f75ab4757faa754d4be878d0","ssdeep":"384:h6KuZUMruIPoZSO9KSVcpJf1gTZYvsTN0IS0ObYd+2kEzF8DFvr0UtnnDTNYqjAL:Cuh+CMSu2YUR0P0ObYl1+lg2JEIIIHGl","tlshash":"72e2f174bd55d970b9388732e52ddc06daf81b6affdb0764c87478a18260ac93513e60","first_seen":"2026-03-16T14:28:01.819365Z","last_seen":"2026-06-22T17:10:35.510391Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/vendora38da5f9.css","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.743Z","timestamp":1782148139743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/vendora38da5f9.css HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729527-3109e\"\r\nexpires: Tue, 23 Jun 2026 05:07:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 90\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wwz9HvkDoqnLLmh95qAwSYsVT25CF46Mn9ElwXmxacjf3Sq%2FCEk6l9OkrQZjJbArnpTBGA8hOEoqmfACdMRnJjvYjFRBdHLmqQ04H4GocHmBFtVPqRO2ZUluTmMNFAFD5jFoFo4VGg%3D%3D\"}]}\r\ncf-ray: a0fcdbb16dab5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200862,"size_decoded":59810,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"5b30b2f8fee5bade8575524db3515095","sha1":"c91b460c8b6387fd2be942e0472cdcd9d1b94a14","sha256":"dd1dc1b8f0e0939c343a52ec8703651795ceb7f7b7aea8687bdee9526e6ac0b6","sha512":"c815eac30c0ed150e4044a27cf207cb9ca212b71343106ad4c24a9d09f9dfab2f1ae242a1ce2da262bdc10782b0c52b72eb57847352bd6665ccebdb8b5cce172","ssdeep":"1536:9ZuvHJdIcLA6yVOdmMJ2E067hjcPiYJkrn2kcndljjkiJoYNEXpSczNlntIyNBiL:6QoZvzNlnnNIClDsIxuVS83","tlshash":"6e14f659e383957f2e17da3d5bc4e9e8bb18de91c80257a1f640900c86c7ab113e7e39","first_seen":"2026-01-23T12:28:08.834972Z","last_seen":"2026-06-22T17:10:35.529831Z","times_seen":9,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.exerecetpxiexi.cc/","fqdn":"m.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T17:08:58.600Z","timestamp":1782148138600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:08:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 23 Jan 2026 10:02:46 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZWT%2BcMBCsSD2tAhbmW%2BBlORcA6U%2F9O9vcSNx7boItnb05nNlEpjxCDMdTVz%2BsMQBzoa5za3tQ8uu7fvvs%2Bmd23nQDjYWoE1GkxXeRwvQgbVBkG8jAK6WNZmerm4DcGE1Vi28Fiy\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0fcdbaa7b1f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4622,"size_decoded":2241,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (433), with CRLF, LF line terminators","md5":"68f95ca397a0de1f041dc5902a051226","sha1":"a4cccdd592f432ebaee2b4c015b800bd4cad0993","sha256":"a60cdbdce8c2673254cf1b227558dfaf162cdc7d366f04c87adf2a518eb5decb","sha512":"81e68770a03493e4e2f986011d0dd41b5a9cc47a2d78559cf2a31cadef45d1cf36faa8e122eb680db60b3a2ec214a92ff92bf530df7035384fa151d18a139014","ssdeep":"96:fD9JLc+ytJQwJVJickBqr6zCZydHRH/eyQuB1XiHliHaH/8:fJJLc+ytKwLcckBuZCxftQuB1XiFi6f8","tlshash":"af91745457e3896641636a06af9ae41432f3d217810efc01b9efa0f89f50fbd8dd3994","first_seen":"2026-06-22T17:08:08.08652Z","last_seen":"2026-06-22T17:09:36.726865Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":5,"connect":22,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"m.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/basicSet/getBasicInfo?t=1782148140058","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.062Z","timestamp":1782148140062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /api/basicSet/getBasicInfo?t=1782148140058 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: learnfx_session=eyJpdiI6ImNlaVlcL3hiUWZTOUt5bGROY1lxQTl3PT0iLCJ2YWx1ZSI6IlZmekRONkFpdlZzcFV6aUY0NjBFZ1ZrSmM1Y2EwT3ArellmNnVrRms5enJRWmYyNHI5MDYrVW94MXJlbVdhZTd4Zk0zNlhoeDErbzcyekhzNW5WUVo3b1F5bU4rRU01YXdZSnVsUm5SazdZOW5pY1NXM0R0YTdQNkZ3QnhxQWNPIiwibWFjIjoiOTc2MmJkMzlmMzQxM2M3NDMzNmJhZTRkNWY1ZWU3ZDg2NmE5MWY3YjJmZWU5MjU1NTI4Yzc5NGEyYzg0ZTgwNCJ9; expires=Mon, 22-Jun-2026 19:09:00 GMT; Max-Age=7200; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18B61KqgV6NrabK5dY7OFxCPsh4AUHLvex6yLKxKoHmLpWu9KoiDfB3lkaKOpqKKVRqpthblgQm2TTRRaBUJDhD%2BUwyB86SPb4B0zmfkmMnKs%2FgInPDw2rCsA2n34yKSJmYztZXMHwc%3D\"}]}\r\ncf-ray: a0fcdbb60d2b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":1791,"mime_type":"application/json","magic":"JSON text data","md5":"9b7599275f25e5c8321dbdc26ee65a1b","sha1":"bf617ef7db4a8eecb4e1621462c8ba319057b56a","sha256":"cde8cc4127fbb56924481a95fef7777735bcabfd17e85bfe63a924fc01436cb8","sha512":"d96e0f56ec553e9e3e59cb278b61efa8d78bf2d26119f404c68ededc63bc83ba515b035d167aed07169b4d734b71f20bbdfd94790d1368d71887f6d93650ac1f","ssdeep":"","tlshash":"46f05cc135fda2a163730190acdb3702b05e601d8cc0ef53dbf0052891c9c16260e406","first_seen":"2026-06-22T17:09:36.730578Z","last_seen":"2026-06-22T17:09:36.730578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/trade_list?t=1782148140059","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.065Z","timestamp":1782148140065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /v1/api/forex/trade_list?t=1782148140059 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0MS7hO5G4Vt97OYZy%2BEb1Ko7Uoow%2B5EaTxe5y8jGC1pk%2BZGuUPEOH0hY7H5mq7lCFO3Vn4GEt02uEwW6ELT5YG0fImwavuV0L%2FlYoORR0eZ1GuXkEUaXWdypaomnlLAasfXQpg8Av4%3D\"}]}\r\ncf-ray: a0fcdbb4bd08569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31870,"size_decoded":5271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1b8b7dcf919e0be0480e8ae4024e0be9","sha1":"21ae4d95a645c3ca2bd92d3b4338911dbd9720fa","sha256":"10519888b71e8ca79d98a6b5e2fc4aadea128799e3c8207153dbc354e1d20b62","sha512":"f41a4f084a5825cd78c177536a7404d3ab5ebc9e35e8fb16e0e4de593a7c8878c86d612b930369c5c802a1b0df9b581d6b490af32a7cbc37eccb9eb8924f7875","ssdeep":"192:8YO5nhNQbwJtCyH91qxMwdGe+tEEbdEga9RfM1NBHtrK7Eu30Z/6jpmtlrkl4Iv0:EtZKgaaN9/rOUMKcKJYNI","tlshash":"9de27613e8fcc1f0fa8527a86c733f69f949e1aa4acd1bc477ad858891800b4745af57","first_seen":"2026-06-22T17:09:36.739666Z","last_seen":"2026-06-22T17:09:36.739666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/user/info?t=1782148140061","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.071Z","timestamp":1782148140071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /api/user/info?t=1782148140061 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: learnfx_session=eyJpdiI6InNHaVJXajhUbTh4dlBYZldBdlRtUGc9PSIsInZhbHVlIjoiZzhmT1N1eG14Y0p3bmhcL2YrRm9ubWdSQXRobDVsNWFQVDRjYXhYNVdReG9kc3Z4VnB6MW9LWUkyYWluSGJqdXZ1dHB2N0s0QklHdG1aM0ppZ0YrVnhmbHZET0Y3YXZWOU45QVVZamo5N0dKanMzUmJCZ1lxWmhkSGhIbjluOFZaIiwibWFjIjoiMGVkM2EzNDU2YmRlNjFmNDg3NDU2NDE1YTAzZTY1ZmJhMWE1ZjVlYzYyMTQ5NGYwOWRlZWQyZWNlNDUyNzJmNiJ9; expires=Mon, 22-Jun-2026 19:09:00 GMT; Max-Age=7200; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZvzN0nRT7BqvgywJnvSJ%2Fq7ml3RLGOJgi7FiS0axIQ2Yy5M7InJGjJPGzi9oR6NC9fgH6g%2FdhXUBHqb1HCAeMZBiVbSh3aE4spl068NyuRR55wPh6ztIuhJfqUobCPZ8GAaHmoCgmo%3D\"}]}\r\ncf-ray: a0fcdbb61d2c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":1555,"mime_type":"application/json","magic":"JSON text data","md5":"f7f1766c7a443d23ce403a825e98e969","sha1":"652183edee25a8d330833c6b4e001d636f183aef","sha256":"b88ebc64268dbebbafc19609aa684a323e676b48d8ef97cc8c032721819c1e23","sha512":"8b9f468f8b52e3944be138b4536d0b4719c9beac0351f25797bd9bd90c6e4e4e65a989f163d733f286da2a9d6b4036e6184b3e85a1959a61a4fbb965242a77a4","ssdeep":"","tlshash":"2880044f000c140311070055540c11100f54145001c1d3151d1d053410fdc4c17c1035","first_seen":"2025-06-01T05:36:04.794467Z","last_seen":"2026-06-27T06:51:05.229266Z","times_seen":193,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/v1/api/forex/getCategories?t=1782148140280","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.349Z","timestamp":1782148140349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /v1/api/forex/getCategories?t=1782148140280 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5uuid7VvmSiEy851n48yabCQx9v14Tc39FxQa6kxCCI%2FHhG3MHInUgDwGnVju5CSlVZ1bbSt%2FUApFJFYFtN0LX%2FAyZ%2B5YDu6k4RYtJb6iwYnw%2Fn0%2FA1wiGbXRCGB4J6vcy7Y0misHo%3D\"}]}\r\ncf-ray: a0fcdbb53d16569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":681,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/pt2d69992c.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.284Z","timestamp":1782148140284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/pt2d69992c.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729527-212c\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51SI%2BJeFUiqwZZC3kw8dPdsTN37IJKoSklIFnkvIlXMKlXE6GBI%2FdKfRcZeG6bCptxIy50ysass7arHDtgluRb1vg9sprtQGXYCjK4FSMZLLodZF7OKRnokF%2F05cL%2F85LKDUMg4S9Q%3D%3D\"}]}\r\ncf-ray: a0fcdbb4dea85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8492,"size_decoded":9275,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x332, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87f1fc44bf8f73da7835c810e4877d75","sha1":"eae24266f4a23df02e9e568ddb2012420abbfc14","sha256":"2d69992c9039b18813d29f5ba4625c197cb22c932c082d974c3eaa7282fc5fff","sha512":"0496cb107f73b3c80ac1ea70d6186cb97612ed5df1ae71af3c05dc5917d44de94e3b6cb4365fcd0ba65e0d8fc28f4495ad617f36b0cf19123d0256ad99d02f00","ssdeep":"192:hTA2gbbSzN3ascve56Fk8JNi2sIkxY7u3OMDBdVqaGijzeZexBp:1W9/rOY7O1ZGiPeZePp","tlshash":"2402b0d20b4b8ab9ccd016feb5859da4b44fa7043f2853507a1c56f9dc51534e3ec9c9","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.908779Z","times_seen":233,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/index69856a6d.css","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.745Z","timestamp":1782148139745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/index69856a6d.css HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729526-ccca\"\r\nexpires: Tue, 23 Jun 2026 05:07:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 90\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JaS1hQAir3hVv6Vzz5nX5QYO5eJyx9vN35imXOT4hSPumf2E%2Fi4zDN1CfRrF%2BTmH%2BtVCWacaaJiWRPJy3p6XWu%2BmgehKDCGpHSSWkJdjrHQi%2Fh4s1PujtiwbDUq%2Fcry%2BQLWIqj%2BdEw%3D%3D\"}]}\r\ncf-ray: a0fcdbb16dac5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52426,"size_decoded":17401,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (52417)","md5":"280c24e277db194ddbba134b0e066ad8","sha1":"75c45660ac1b2bf69c187b49fe7b7177a1382915","sha256":"69856a6d6d4e91d2d1df2d4e7efb8a46c64264101dd3adea786d8f8957ac7af0","sha512":"68e7ae6322751e806a866986723011442381e3eda88eeb548d0d780b358bc58c5c119974cb7dee450b7e6d0b437af273443c82daa6df01513b0272b934d52281","ssdeep":"768:64Uk6ztMlk6ztM3FM6mkKb/biZym8EG0oLPHzlUf8f7O2+:6BztM3ztM3F96/biZym8+o/lUf8fY","tlshash":"9533e6b3f2a51465fd378aa2e0917b7e3c2ee0d38f264a9df545733482c62e70a1254d","first_seen":"2026-03-16T14:17:59.719361Z","last_seen":"2026-06-22T17:10:35.528344Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/47ed03720ec68b654a42b875a199f944.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.870Z","timestamp":1782148140870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/47ed03720ec68b654a42b875a199f944.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:35:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e048e-113a\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccz2HB4DP7Tjh0S0Z%2BiRxoPWkP2vE2k3GhJMneYrgVxu%2Bc53Z8FCkxDbfOmVW9YFSwUS90ziYctqVgJSg00qzh5pM3%2Bqanrd7XAjiEMJ5cPTVcr%2F1%2BD2NTPJ93cjjUzehGDfP45Zuw%3D%3D\"}]}\r\ncf-ray: a0fcdbb8984f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4410,"size_decoded":5191,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"08cc62173becd89c4fb8869bf74a44f5","sha1":"19012b5b4fb20cdc0b5e6264c02ead82665a7c48","sha256":"9d2c8d3fd13ea6183703ee47138efb4e7eee2674b86ea9a4547d28039010dcc2","sha512":"d4a1b1c9d3e687098a39d1738d14d48533f391ef86354f7fbb246ffa90145bbc3df3c3240c5eb4a5a122e424dfe65be34625b2de2a9dbcf9cbe21e661777efc9","ssdeep":"96:jPz8Q1ZoWYUucPXceioggaLqDDXka+85b2bQGmhR7Mq7tdYWXIy:jpZoWdB/hggKq8a8QGmhR7htdYWXD","tlshash":"f4917e9b53348115bd0bd621070730b687a6b98b95d93a36fb8f1dfc352581395ec610","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-17T15:54:13.653602Z","times_seen":21,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/4011654a225023498fab5d4705cf67b7.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.877Z","timestamp":1782148140877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/4011654a225023498fab5d4705cf67b7.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:26:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0280-f04\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0Qfb0GX4alZxkZiYGuEyF28lgR9lgsH38tk4VPcXZL877FW3kCzSnMB7NhzhBfcocjKt%2Bw4v4%2BdIeHgffP%2FX7XrkPoPi7mPHFdQOglhKxNcYq0sc%2BGG78JK2%2FhdHQXCjlXrqBRiEA%3D%3D\"}]}\r\ncf-ray: a0fcdbb898501525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3844,"size_decoded":4623,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"bd7dbfce92dacb8631681106de5ef95a","sha1":"6c5c4630a53c4c44e384ecab04feab414cd8acb7","sha256":"40829b5d91861dfaf6c334b9984de67d9ce8cd39d68ad465e29ee542bfac356a","sha512":"9d0c920a71aedf2c7f38c43e316f5150a59eb1cfcec11c22bdebb68a27266522d8639d1c6d665211da2e8ea685682c89693f3a7f21dbd2d3a526ef403aae7d20","ssdeep":"","tlshash":"4e819e8fe584931d03fe6b6aea383b5f5f2a739d75511a88c644a720dfc08c418843c9","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.914522Z","times_seen":12,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/8da0d3fd63220e56ed683737bd16d2a4.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.879Z","timestamp":1782148140879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/8da0d3fd63220e56ed683737bd16d2a4.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:32:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e03fb-1032\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9XfTcd%2FKzdGj1xAJRxoEuJI1b%2BPgtnvDyT6uso0NeoJ%2FW2pLsYkhP4HaDeSTiN8tw%2FENAAJYMvhGkC%2FPIRWuVPteWK3zZFjSkIzhn8CkPrOjD98hdnBqHAlefUjsRnBIFWLCrA5IA%3D%3D\"}]}\r\ncf-ray: a0fcdbb898511525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4146,"size_decoded":4928,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"dc8b875e9350eb0083dc946d696e9eba","sha1":"6613c52b99ebe19dcac371fd75996185f4eb2557","sha256":"540df34d52cb910e3694c9affc6b1d2c84374c5f116837a0bbaa5d2748a888d9","sha512":"0dc6dd99eb8775a4e39b49b05e1376ea6d0314b6636f2730b8c7701abe331c0a4570df9f7deecdbbbf95f7e43048b24852bd91357b27a2e2bc032e03663432e9","ssdeep":"96:FSBb9ornF/y40SabbtVVRNmxHLWyZPajhBopVsQbNVppYw2JFwT:6Born44habbt5NmxHXPajhqzp0FwT","tlshash":"d1816e9e5d1ba3dcc5d67ebe4e5864829099f2ea40e841f009c70e12c2e0f5e5563364","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.959244Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/f73bc669787ffe50a9810c785b6887f6.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.904Z","timestamp":1782148140904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/f73bc669787ffe50a9810c785b6887f6.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:29:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0336-1190\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlf%2FrPJH%2B4bw2KlXoFaXz1RmQ31%2BmHFPHvqhdoBKeXV%2B7t4ZB%2Ftp2E6za%2B6lP3Wq%2FEEAsFAIvqsIyztJkmRsNOws5%2BPD2gvr9Jyy%2FnR7HabPxJEugtE7EWlBZoet3nh39B43Nkqy8A%3D%3D\"}]}\r\ncf-ray: a0fcdbb8a85d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4496,"size_decoded":5289,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"1aa3d4d4751c3f490ab32e7e7c0c101f","sha1":"9d65815d480a10ffc365d47949a3f946a9662264","sha256":"2d3e6c469f124f9d471d4d1926d1ff93ecbe2cc6ef056b43a3156bb6425c90be","sha512":"27c43d6a09612bb8258c3c66426a434ed8ca9ca2d784fc187ce548e28e537a0c01d6023226778655716cc2895d8faae539da2fc84d6c467de1a15197280a477b","ssdeep":"96:wUFAmBLZ0yXsaaLSFkwnxhNPRnurVWDwPHsb2We852SPO:wkAm30qsaaLSfnxBucDwPHu2WhPO","tlshash":"bc917d7296f967d150e8cbe746f3d4e3f51a79c692a40186ff1df40a289570c02ee24b","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-07-09T23:40:40.913084Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T17:08:59.222Z","timestamp":1782148139222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.exerecetpxiexi.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 22 Jan 2026 21:22:44 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqaWfjIxmYWu%2BxEH3DNfCIYxX%2BjSJcnTuqZD8eGpIhN8fpyJVUZTo7It0A1584jkXnphYEJQx5LmZHcPMOGJu8Ne3NNaKXMGiVyS%2BJxq9ckAQoDYyjkw1REEe1O1plVTdfXTW4CI7w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0fcdbae4cab5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2498,"size_decoded":1519,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"e18e7c53a19e4daf3a635423c571d1e5","sha1":"cfd0c7c277e8e215fa935b9c5ce79a3105aaf36e","sha256":"0f4031bb86c392d3b40603789d0a42fc063f36e8c105b94ca65b9619a03ee289","sha512":"eb5a1d92de9fdaf1f521caaeb62aeaa7a72d208d236cf29215592f0e2dfd80698bf3a8403d7d0a7b8cf7fe39a057048fa7e4cdf7c25cc00a58a1b5be176457e8","ssdeep":"","tlshash":"4951fc5807d3495551b3e1044f9a993563b3d11b920efc03bedfa0a99fe6b3da8c3a80","first_seen":"2026-03-16T14:17:59.717953Z","last_seen":"2026-06-22T17:10:35.508131Z","times_seen":8,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":16,"dns":16,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/09fcba195ec504462daeba33f0b27acf.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.896Z","timestamp":1782148140896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/09fcba195ec504462daeba33f0b27acf.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:38:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e056d-ebc\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYPW4oK52z%2BrqvfBXbBUnFeCySa3aOB2eZWqgz7Z46d9eQizI7YrrALVpi7%2Fu400QROQxXMws6XJP%2Fp0Q8Ep5E7QbbvB6uTMszZRxX6ZEaikI%2BCRKzkCdDC6kklUvVP3uhHuS4u%2Brg%3D%3D\"}]}\r\ncf-ray: a0fcdbb898591525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3772,"size_decoded":4556,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"a698844d269e7ac4fec5f7ef638e8893","sha1":"72abc25dc6b00bd481423407984a2b8eb6c3f135","sha256":"41b209c9c225e463d2b92bab103728825196eb0cb6f7cc1fc91d2566ab16634b","sha512":"bada79186b99f1574808c64bb7973dfe1ebdb37d6422511b01217554374850b990a22d86678093648a6ad31a89f6043dea81550626a2a6d7c8ee531ba609fed1","ssdeep":"","tlshash":"1b715bc7c38e643ca063993226f456c93772a09b060981b4acced5a6c1184e06f25bca","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.918442Z","times_seen":13,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/583b0a9c68f7c841763bc5452a2a7b90.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.911Z","timestamp":1782148140911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/583b0a9c68f7c841763bc5452a2a7b90.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:28:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e030e-1502\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2T3OGvumRIZcQUSxlEzgvftEQcthngfRooTZINljBp9k3Vbcj0bVtNro7%2B6ehbvjvZKfEE2wJBffzsE2c8STtgAdGTETnfs%2FbGgZp5svluI6%2FNNg99aIgA0isYr%2FzuVXDp4OhpcDg%3D%3D\"}]}\r\ncf-ray: a0fcdbb8b8611525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5378,"size_decoded":6161,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"ba676fbebd96656664a98c27aa4da34b","sha1":"07e375c99c08356d57c571ab69ec2c06dbe388d2","sha256":"b1be5a16c843d94a60fdae2ac0a35b031e31482a96f6608d64f2f554648d0136","sha512":"ad33aede38511ea808ec7752dc5227aa0334b88afd9f5eae94cafd6657a45b629e0553ab4f4664b9b8e599eab1fa6a7618d770090db44e17aa508ef048aa1ea2","ssdeep":"96:kvWga1rjE555z4EMN0TUKK7NLTWVCAvwukr88s4Czd276IfV:kuNrg5D0BNnhpf8jvhkBxmg","tlshash":"61b18e5575679caca01e428ef30683c7541b8022faa82b87d86ad36be532025fcc89c6","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.958011Z","times_seen":10,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/a7f1ec6241188f4a4e91682c1e761617.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.914Z","timestamp":1782148140914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/a7f1ec6241188f4a4e91682c1e761617.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:40:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e05cc-15a1\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fv0U24UDnWBSAtCW7g%2FhtPhD3LTI%2BGf0TZvRI%2FBej7KaBQVQoO6GM%2FBg4LH96ltrzte0F2TuqX6sxlLvX8VYRfOLMKVwcqNkJ2TVLRdjvIvISqi59hdlwC1LLUqrX6EldN16cJGRhg%3D%3D\"}]}\r\ncf-ray: a0fcdbb8b8631525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5537,"size_decoded":6320,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"7b1ef9ad651029b582178a788ddd5054","sha1":"251ee30570cf41afef778ac6900ce61ad267b603","sha256":"4ab34ae4e8da53287ef262362f519ec35a40bdbe84427c1ee6c2467a77957f41","sha512":"0b6ae713e1d2643add2d0cd947fde48ee755c6fd38c6cbae758932b1caebabce4d7ac72fd6ee6206045ca31ecef918c5a8f64df7977a4c7c4fe84bd59c744bc4","ssdeep":"96:H32nrzgHKQuPjIsJptxYE9C7QZlid2zETT4b8ARq5C8DOe1K6oB2wM:XiEWP8C2EE7QZlaQ+4bg5jDkb2wM","tlshash":"14b19ea5ca77f3a19e9989030ffe501189af388b357364a284dce07f8544673aa885c8","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.964636Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/e59d09deb7f563f78e514da50497fcfa.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.916Z","timestamp":1782148140916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/e59d09deb7f563f78e514da50497fcfa.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:30:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0371-1071\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N78kZ8vichVV0aXxdHdzx4ESqV%2BMSllJJs07lNifmXH44cAG1k1QIms%2FIP1QwPXHi5R4WMsjvSgVEG4iDcTuex5dayDNjiu15sILySJOif%2Bq%2Fip13iK1mr8A8lcZ5AgHBWiNFw%2Fpnw%3D%3D\"}]}\r\ncf-ray: a0fcdbb8c8641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4209,"size_decoded":4994,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"22ecc57babbed8a7582b5d3c37ee3b9c","sha1":"7ddf075e112c5907c0fe64572b5e952018319451","sha256":"ba4cd315357e24f0cb7de3d6fbec09210a39906c603b69c80c2fe83140a5e368","sha512":"f471bedadf03fdf3a8f00e26d6b0dce95d6b133f3e9ef7b5ed69fda35ac009141d7d21197f5fcf68e377be2bb6bf88bef0d92b055c08861ba64fbd83bf1f9012","ssdeep":"96:x1oNfg7M4RozJgF0s+Ow4aWi1LyaY20XZR+RzZ81cbo1l0kA5WD:x1oNfkiJo07VWO+wGe8flrGWD","tlshash":"9d918e550bd5ae8a174eef2449361bcb8043616adbd38c39db205c48b3384a67a99a04","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-09T23:40:40.970182Z","times_seen":14,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/logoe2c2b693.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:01.394Z","timestamp":1782148141394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/logoe2c2b693.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729527-14c252\"\r\nexpires: Wed, 22 Jul 2026 17:07:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 90\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y88lvBFJDkPWm5P5Xt422W%2Fqe2b7CcvYeOPdt8MYLCWzIspyoh%2BTYswdayB6b%2Fk7guDtGGHrQWzuO3xNAN25BjXXNI4kRm11B%2B4kT7khhOt9GPWnKaoLLmjgvPaDqQDgXRkwkOL%2BRA%3D%3D\"}]}\r\ncf-ray: a0fcdbbbb8ca5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360466,"size_decoded":1332975,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"519ce4a04b2de3530853318ab9cfe65b","sha1":"75f65169fa9dd8f36f1585718b1c2a11bff233c0","sha256":"ba783fa1481134348374c2a2a8e3d9751405734130f4e316b5e5cdfec24ecd00","sha512":"842658b852be879812437a1dd6010e7c22f2bde3d040fe4b1df584e94cf2e7c9161db900f28eb6c229df2780b015f79dbc0697c0853c6013bbf92285d5be32e4","ssdeep":"24576:sritiO6a5FCwzVluRZctuhCKot1pfprugwdPQ76+h/cO:MitTFjakwhCKIzqFtj8cO","tlshash":"1e253389f4402bc7db9ff6f0b3605f0c6ea830685aa41a791a33d9013918b1f13ed796","first_seen":"2026-03-16T14:17:59.72089Z","last_seen":"2026-06-22T17:10:35.513928Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/company/getCompanyStatus?t=1782148139236","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.243Z","timestamp":1782148139243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/company/getCompanyStatus?t=1782148139236 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://m.exerecetpxiexi.cc/\r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 22 Jun 2026 17:08:59 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcVsyOqIRsCHOGPNfbnnf2ryre58fy%2FB4%2BMzqw77m6nBXDlDsB9%2FbhM6Bxf%2BQOxxkddqzXFjDW%2BXSVkU71qFybNQVmcjjVNg2VKm2QB0aIFfEVz1zOTLzIAmKYJus4lg6GoujYVBguk%3D\"}]}\r\ncf-ray: a0fcdbae7f4a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":654,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":402,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/company/getCompanyStatus?t=1782148140055","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.059Z","timestamp":1782148140059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /api/company/getCompanyStatus?t=1782148140055 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: learnfx_session=eyJpdiI6IlVCSlBxeHQ2TkxSMlZ5dVl5Q1wveStBPT0iLCJ2YWx1ZSI6Ikg1cmpCb0d5Z3JnWjMyZ2VPSmR2bWhEUzNEVld6UGQrXC9tMnd3cm5HeUtnUkZZT01tME9ScWhPREdJTnRwdXJHTlNTR2lZWWFvVEZveE5EOHF0ZHpjXC9hZ1ZuQXZjeVJ6N2lacWkrTXpcL053R0FrUE9cL3NaRks2bnJBSWJCMUhDTyIsIm1hYyI6Ijg1NWE0ZDgwYmEzMzg2ZTU3YTFhYmJjZDY5ZGMyMWRiNmRhMWRjYzZmYjY2NTE2YWZmNDE4Njc1YWU2OGJkNDEifQ%3D%3D; expires=Mon, 22-Jun-2026 19:09:00 GMT; Max-Age=7200; path=/; httponly\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4FSst5tGunxOkOl7AYxfvdN0ZlU%2FlZRKW6elTwdRIBSlGLnohBV2QX%2BDMEEXFcqBaesDPRvflTBeUiK3%2BkHkQkTyzPr27y6bokp8188w3Yj%2B6Xon9xePNqu%2BkFGinMkRj0VB42EzCo%3D\"}]}\r\ncf-ray: a0fcdbb4bd09569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":1668,"mime_type":"application/json","magic":"JSON text data","md5":"41f6670ffc5dfd6fc800df295acbc640","sha1":"6f992b34eef447fdd3509f70d6ac79fe9dee35aa","sha256":"13d0020a75cca22bfae5d21e6d3deb6f09ada4cae580840339cf15a1891c6e42","sha512":"4a28ee81fdf98c7ff0cdc985634906c12f2bfd00f8fdf2714d08b8c0518e62779e636d86869fc00d156552477590c738fa735b12b54296cc5e5d41deb56594ac","ssdeep":"","tlshash":"bbb09b95546d5147656311c4544451138375f1538941db85475da97444dc0ea6055527","first_seen":"2025-06-01T05:36:04.766654Z","last_seen":"2026-06-27T06:51:05.221353Z","times_seen":125,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/basicSet/getBasicInfo?t=1782148140058","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.068Z","timestamp":1782148140068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/basicSet/getBasicInfo?t=1782148140058 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPWMzipIekvMwp8GQCLMeGM%2F3j2nfAISy%2FhhpKxAhDHGgBYppegmbMu2NvNh0DUHSwxLbRQvGaf4LaJxkFrIUYRDVSsN8dP48XqaBapPSY3cZ3A56vY8gFw5mYp%2FZx01ZsEuU1jsR7E%3D\"}]}\r\ncf-ray: a0fcdbb37cef569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":675,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/home4f9b8c86.css","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.074Z","timestamp":1782148140074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/home4f9b8c86.css HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Jan 2026 21:22:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69729526-a41\"\r\nexpires: Tue, 23 Jun 2026 05:07:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 89\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJNscHSq4NMy9euDDe7m8%2FXWKTBtaSOq6UzuKoVxRRtzarJ56O0IkD5mKzUc%2FqvIQ095%2FKVr8oHxnjF1tYPr861kRixXuK5iMfCDHg0R4cUbQOBJslgixp4zKNFU3ACh1qY4zYKGPw%3D%3D\"}]}\r\ncf-ray: a0fcdbb37e425a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2625,"size_decoded":1763,"mime_type":"text/css","magic":"ASCII text, with very long lines (2624)","md5":"c5ea99d1a6387991f91fdecafa9ff47a","sha1":"00b43d70b13f2d3e1700427bf612220d26109947","sha256":"4f9b8c861bf203a61f6a8a2534feba3af12f5b16b2c59024a37a601f227237be","sha512":"01dbc705d59081423196e39a2f7b87ec9f382472064029586bc4d540ab52827e997c5a8da07c8b50547f3db783bdd081ff6bf7dc0ee47bbb5aab726bb94b85fb","ssdeep":"","tlshash":"595187b2f394033e7417c979b1e35aeceb2ae633d2010724f684333892c75962562a5d","first_seen":"2026-03-16T14:17:59.720162Z","last_seen":"2026-06-22T17:10:35.49806Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.exerecetpxiexi.cc/assets/file/vn1ebb558a.png","fqdn":"pc.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.279Z","timestamp":1782148140279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /assets/file/vn1ebb558a.png HTTP/1.1\r\nHost: pc.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 21:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69729528-19af\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQThDPb%2FD%2Fum%2FPA4Qt0APFO5pIZWxl3kcQUuZjoEpY5ZPNMG1J51euj54%2Ft8hk8LRjcRE8zLoQLYDPQlFJD4QB%2BesKvdPfQ%2FtduPiU2MXaP2EqRNUs5783ODPFR5niKTGa36rZgsag%3D%3D\"}]}\r\ncf-ray: a0fcdbb4cea25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6575,"size_decoded":7362,"mime_type":"image/png","magic":"PNG image data, 129 x 86, 8-bit/color RGBA, non-interlaced","md5":"f8ad79b8e3e7e4985afa5ac18c05a511","sha1":"fd97fa80ffc00ce5e94f239649bd442680ffc219","sha256":"1ebb558ad547d5408153a2ff59021b6de1d65c42dd3253de9124ec3700cee40c","sha512":"f7f79e53722aa1669d0511f318cf2b0bf75eecdf806a3d22a87058f0a99caec7d05c0e197f5d6d21129bef8debd23378c707633970fda7ac6a85943a1f7b79b1","ssdeep":"192:JDV9Cy7Wec2PyJcmpwAQuP4XDBlRBjDbVAumhew:hV9FWz2PyNm8PkpBvZ9mhJ","tlshash":"45d18df7bb8049a1dc6dac737104f3d01567e98fa17890ed87a8408ce22125c8b20ba3","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-07-13T01:18:26.188036Z","times_seen":272,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pc.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/default/setting?key=is_show_mobile\u0026t=1782148140282","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.335Z","timestamp":1782148140335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /api/default/setting?key=is_show_mobile\u0026t=1782148140282 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: learnfx_session=eyJpdiI6InJiNVBFbGd5STNDVTFmNHpVbFJSeWc9PSIsInZhbHVlIjoiaGxoVXdkbjJtOHRsQ0FoTkc5S1FvNTlBRXRzOVU2UGhKYU1ZN3RPZUZPRldyRTJvTWtBeUVDcnFnUVwvcVAwV1didlFiaW5BTUt2UUczYXEzXC83KytQQlBNRkNzVHJ1RG9uXC85WDRtREtLZEdKa0JjTDVuMGY0STdzQnh2SkNuQlUiLCJtYWMiOiI4OWM4YTBmZGViOGU4MzQ2MmZlMjgwYjMwNWJmNWVhNWZjNjVhNDlkODYxNjgwM2ViOWY3YmMxOTE3OThkMWUzIn0%3D; expires=Mon, 22-Jun-2026 19:09:00 GMT; Max-Age=7200; path=/; httponly\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrdFQK65APIxsbLF%2BdWpKoUqJu8UlCMq%2FbfRlY8xng60ua3gNw9V%2F%2FzupsIYRQj0YEHXiBEXiK3pOYELg%2FnBLPKThwBpoXZmtnW7GpfIePuEcB2t%2BxYi5fJpdB3CLIwghguJDBzexr0%3D\"}]}\r\ncf-ray: a0fcdbb67d35569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":1606,"mime_type":"application/json","magic":"JSON text data","md5":"d74deccc0fb757d23b74f81f4ee7485d","sha1":"d7028902a64072c909c3b04ec6737d1290ed004f","sha256":"67978f037237e2dcc09819b32dedc6f8ae340e171613d288d3088206163b8971","sha512":"0f37f9dde3b9094ae72c37a7127ccadf1225f96bcc2c9a9bad0b62646d2a343a8817e482bd0ede7920e303989bc4479017693798822be93ffdbb04b9407e74e1","ssdeep":"","tlshash":"2c900282241b00828606104894088f09115471821400432a5d8e91218e5d1952142470","first_seen":"2025-06-01T05:36:04.735562Z","last_seen":"2026-06-25T16:57:57.833119Z","times_seen":146,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/7f255029f85308c81047cd8801a7a37c.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.892Z","timestamp":1782148140892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/7f255029f85308c81047cd8801a7a37c.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:22:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e01a9-93f\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMEsXOj2bGG1TlPRGG2BC5Ww%2B5IZmAzmoZ9zAcprx86cRT23YlNsxp8wUrz0iwibzHrtTVnq9kHh9GDagwp%2Fpjw0o90zYJbIyrVQLCReakJjlFPmAwrzm16aXmIDhvEFEu9rd7kJIA%3D%3D\"}]}\r\ncf-ray: a0fcdbb898561525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2367,"size_decoded":3145,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"7704a5073be9661c8eb22571f463e964","sha1":"9f1729f2e4c0617d5422acc03141c264e63b24ea","sha256":"dca065ef7e48932e0941b71c591efe1a0c02d06fcc2fe511e448fd89b8964ae2","sha512":"780c6504b6ecba845a5c87590c83784e64b2c3b91f7a57e0cea47a936a503ce9d8945dd22be4bb2398e70560fe9391a36a415299a8ece941bd30302607bc736d","ssdeep":"","tlshash":"a4411bc730916f27f7074c87b51079a2a91d7f79c1625f40efa1739850a0bd4609a6b1","first_seen":"2026-06-22T17:08:08.118928Z","last_seen":"2026-07-09T23:40:40.98958Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20260123/98bc5353e3770bfc2fe1a34645201b7b.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.906Z","timestamp":1782148140906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20260123/98bc5353e3770bfc2fe1a34645201b7b.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 17:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6973ab8c-10d04c\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJcduwL3M2RKp4smDTofSUIp4mjebnQxrYxGXLSA78FdzZTuPEWMBj9C1zgDqysTbIy3pU1D5FN87C%2FmTHXZQTP235NShKUEh87jB5CktHWWALMGwS7w7P1FxcEZBzAQpoWsyK3sGw%3D%3D\"}]}\r\ncf-ray: a0fcdbb8a85e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1101900,"size_decoded":1098006,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"f067b3afdbdcd990d21fb425f5d38d0c","sha1":"f5d72e50b49f9abab437649548c596fdcf289b51","sha256":"cd564273484fe6e23d4efa2831296403f14b1dd2acba1e1099c217a779c32aa0","sha512":"8e586b099d5c3c256e9d9f4a603fb962831ff3bf4df5915c12ba5b6681a58b64c454ebffe9cd2044846e9e5754ff7f8a9f0224f550073269c79ccacf290f2870","ssdeep":"24576:M18g28VhlNrTUddtea4mrrS03WghdOsyaxPV/uvq:Q22hl2n54OW0JhdACPVcq","tlshash":"7c253373d6e0a5b3454bb755eaf7ba891968086417270fd50a9fe64c2d22fc21cecf08","first_seen":"2026-06-22T17:08:08.134646Z","last_seen":"2026-06-22T17:10:35.508914Z","times_seen":4,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/f5fce51af7fdb10b22ed518192385d7b.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.909Z","timestamp":1782148140909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/f5fce51af7fdb10b22ed518192385d7b.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:42:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e0644-f4c\"\r\nexpires: Wed, 22 Jul 2026 17:07:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ao9meGDEwAXJsqmpq%2B9hLjQMs36iv3VZYFM1KP2KI3uRFO0%2Fbq%2BtALAFfk%2FOSSEVB1Sq9K4IvTPjuhilCslNg9oIILBstg1f2tc%2FzzbDju0P9iFnaFCIG3nKnArZE6NrIfw2Zg8ZQ%3D%3D\"}]}\r\ncf-ray: a0fcdbb8b8601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3916,"size_decoded":4695,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"4b2ec688c4381de2cf5f199ae23f1773","sha1":"d74dc55d0d8f90ba86477d1246cd907092090b9b","sha256":"70008149971fda9178d613de061ec6fedd0b1ee06f3a7ce503c2191fcb804bd6","sha512":"83600d3447a333e725e98a31105a9603eafa54c6d32f3dffbe03c0273d61385c9c61c78099cb8afe5f0f0d7666ff2095f18c5ba3a5aff00e837a93969efcf4a7","ssdeep":"","tlshash":"fd817d3939f10d573b21e92299918302f06bf864687c2a58702e99091dd795bf403ecb","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-07-09T23:40:40.917907Z","times_seen":11,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/company/getCompanyStatus?t=1782148139236","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.240Z","timestamp":1782148139240,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /api/company/getCompanyStatus?t=1782148139236 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nauthorization: \r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.exerecetpxiexi.cc/v1/ws","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.exerecetpxiexi.cc/","date":"2026-06-22T17:08:59.263Z","timestamp":1782148139263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"GET /v1/ws HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.exerecetpxiexi.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DddOOEAk1e3PVjhr6UGS7A==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 22 Jun 2026 17:08:59 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: LMMuHzSmQBQei/a4VlPJoFCR7hQ=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=factyPONcWk7N%2BfrIGi4QeHv7iJRN32KHiN4WbVk0fIdDfEyC7Wka7qaoE1zszwGziDh4yxV3JJ44VVyCf1eQeVBQs703QaXgVB%2FXTxDuZm54IB7gpoG7On9PewRz5O89e25gUEDWo0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a0fcdbae99ec120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":603,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":23,"connect":24,"send":0,"wait":407,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.exerecetpxiexi.cc/api/user/info?t=1782148140061","fqdn":"api.exerecetpxiexi.cc","domain":"exerecetpxiexi.cc","tld":"cc"},"ip":{"addr":"104.21.16.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.076Z","timestamp":1782148140076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exerecetpxiexi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 03:12:39 GMT","end":"Thu, 13 Aug 2026 04:10:29 GMT"},"fingerprint":{"sha1":"4B:48:8D:7B:8A:4C:64:AA:FE:6A:46:B4:DF:CC:3B:64:43:EC:7F:1D","sha256":"7D:4F:96:51:E6:30:00:DE:11:DE:C4:BF:56:A2:C0:BB:8B:7C:ED:A4:7D:2A:7E:1F:18:49:5B:4F:39:8B:10:AA"}}},"request":{"raw":"OPTIONS /api/user/info?t=1782148140061 HTTP/1.1\r\nHost: api.exerecetpxiexi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nOrigin: https://pc.exerecetpxiexi.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/plain\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wv76EudQytYhl11kpoa5R0cVQvqs2UVoKqPn92AZJE7K3f8TMiQ4f4YxAo8LUFgN%2BR2MOgiuxK5m0hwF1cXQer1vfNXzmZ9KYbHS0EvQPlGVD1BqvVQEdkJyaKyxdDMVioDWJc4zyXo%3D\"}]}\r\ncf-ray: a0fcdbb37cf1569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":671,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T19:40:28.979277Z","times_seen":17321985,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"api.exerecetpxiexi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.learntradefxs.cc/uploads/20250509/a8f6ea78dfff95223161f61a173afccd.png","fqdn":"api.learntradefxs.cc","domain":"learntradefxs.cc","tld":"cc"},"ip":{"addr":"172.67.199.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.exerecetpxiexi.cc/","date":"2026-06-22T17:09:00.912Z","timestamp":1782148140912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learntradefxs.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 14:39:46 GMT","end":"Fri, 11 Sep 2026 15:38:30 GMT"},"fingerprint":{"sha1":"48:DE:E0:F4:C0:84:42:0F:56:0F:43:71:56:3F:1E:C9:4C:C2:DC:52","sha256":"50:5A:77:6C:EF:02:1E:43:2B:54:AB:FE:14:58:A6:4F:90:D4:C0:97:86:49:93:88:FF:5A:53:8B:11:26:97:FF"}}},"request":{"raw":"GET /uploads/20250509/a8f6ea78dfff95223161f61a173afccd.png HTTP/1.1\r\nHost: api.learntradefxs.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pc.exerecetpxiexi.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 17:09:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 May 2025 13:32:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"681e03da-1348\"\r\nexpires: Wed, 22 Jul 2026 17:07:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 88\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gm3cqz0YAXoVWpg8iDAJAScjM0g0f1balCk9qn3jesCCtsPXP8Z%2Fpy6j%2BONX6pgQWNTJX0xzJKWl41afX%2FjeO8V%2F7EcBKv9HSZNVtCdKkHgLRz6FYZ5IjADNarN4VydRL%2FDAAtD7Ig%3D%3D\"}]}\r\ncf-ray: a0fcdbb8b8621525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4936,"size_decoded":5721,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"8d8a21e0d7915c8096282decfc197a36","sha1":"9b82491101cbfa3b92768f08c73de0f7a8f07847","sha256":"3ecf56565ba9bcc5874cc67c416a0a870ea56819dd1eb5d65d6c704707713dec","sha512":"911605a1654252ca5693e234d7eb6fa5ce8be02da9c8022e9c000000ef2cd6c782ae400b5c09ce976ae7b92b0d881a07a51456c051f932ec3d88ea507a75281a","ssdeep":"96:Q0Gk2o26fDPpoEnzUdN21BroJPVfBOlBTdvhTqJFqshJFFfTzy8R:QVkjP9wa1BoZBWZhTY0i7fTjR","tlshash":"46a17e7285c6dfb1062fa89753d314b882fe42a205052ca834c5f08865ff514d8fb839","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-07-17T15:54:13.627512Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}