{"report_id":"b878399e-cdc2-4856-8a38-b9aec0804921","version":0,"status":"done","tags":[],"date":"2026-09-04T16:42:27Z","url":{"schema":"http","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"104.21.29.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"title":"Btcua-exchange","dom":{"size":24406,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15525)","md5":"8a562b7e58d7fb28b32ce8c497f200a3","sha1":"35ae4c56be272893b71aa0de10297a3c58ae1c71","sha256":"b8a10120a668f0a0ef4743816a3a8d45e1f41f9aa5efc22a603eaa2ebf058814","sha512":"2a89107562b491296aa48d18f8667ba51bf3b2b2c8e685b4602aee0373194dd8db3ca72ec70192d39b4a692f3f7c226c8fee9114d5d8fe46e62bcbf2ea948108","ssdeep":"384:R6pZCxZ2RjhLF5FmFOOFrF8F5FDBOyzZaYsbYSSAb6:ReQxZ2RrbyOqRUbDBsYsb7N6","tlshash":"8eb20c72a08559b242f78ec1e5697e1d72d7e70f811ac8803eedd8c90fc3db5b56a0a4","dom_hash":"domhash66871e54946232c3536c6573bf3dc190","first_seen":"2026-09-04T16:42:40.117174Z","last_seen":"2026-09-04T16:42:40.117174Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"104.21.29.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:42:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"btcua-exchange.com","ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":24,"received_data":2694168,"sent_data":10935,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"heco.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-19T02:24:37.940355Z","last_seen":"2026-09-04T15:56:11.897682Z","alert_count":0,"request_count":18,"received_data":5020913,"sent_data":10227,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"webapi.btcua-exchange.org","ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-07","domain_rank":0,"first_seen":"2026-09-04T16:42:30.639009Z","last_seen":"2026-09-04T16:42:30.639009Z","alert_count":11,"request_count":12,"received_data":47826,"sent_data":6575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"assets.kraken.com","ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-04-03","domain_rank":854257,"first_seen":"2019-10-31T16:08:46Z","last_seen":"2026-09-03T04:31:02.297846Z","alert_count":0,"request_count":9,"received_data":86107,"sent_data":5034,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c56c9a186de9496b4604928547cd9915","sha1":"28aa4d7ea8edc4fdafac7fbcd3ce9bbb1a2aec4b","sha256":"b01fde3378ca5fc3660d9f341db8b2c3b7eed4260f557cdb98402077e3fcf4b9","sha512":"1c9aeb975d9750908c00dce5f1a296f214741db78d6843c79fb4d5cea0f4abf150c2949b92a95ea77d61311ec77e806ad7b0a2e2b6b2947f6651587007272d5a","ssdeep":"","tlshash":"d911abfe191a70296303404e976b7805642660a9000a184173ccdb9dbb9af6dd0cbb8c","size":1034,"data":"","first_seen":"2026-09-04T15:56:41.572239Z","last_seen":"2026-09-04T16:42:40.163651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-04T21:07:18.435993Z","times_seen":42277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-04T21:07:18.435183Z","times_seen":43661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"082993ca9801435a06bfcac97b460f13","sha1":"b9af03543b9086de5d26510b8955242a41bc3794","sha256":"2736986b1e2e092d7655b6c0e9d5e23f6ca4bfb8dd93bb45a28bffe610820bb2","sha512":"516b610f3e0e03a91314115d3676510c5d5e1f03f95c47daf08642e06bae183b3d51d03e496c003bc2a311afc6651699439d4f15d7f193142d7bcb846e792f09","ssdeep":"","tlshash":"d04141aeb46335707912961b875fef4123770087020ac51179eef7191fe457b11257ea","size":2062,"data":"","first_seen":"2026-09-04T15:56:41.576224Z","last_seen":"2026-09-04T16:42:40.166012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-23489580.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97364644a4cff47c57645a327e73c988","sha1":"d691cfdd462d0b83029626845eae5d703b39fb69","sha256":"77efcb0402063e5808172b49f6861c6a96f67b65b7ee6f8af0e8ce38168b1e09","sha512":"87abd4386772378718aabac37c7aef5bdfb7336f55e0cfd3d04108e5991caff77c841a028ed7f099fefb471dc57ce7a198a4f227e8669411a457efbbe2a0e3e1","ssdeep":"96:5MU57gPzRpnYfN13IqZqD+wnv6H1ItbCys1xH00LDh4IGeYmy3huOc3TNCFJtIF2:fiPzRhY1hIgqiwSItbo1lzemCh8TNzF2","tlshash":"5491b68cf80389baaa77589844550420328c3bfeb1294cf6f2fe8d4d67b4db6d784720","size":4558,"data":"","first_seen":"2026-09-04T15:56:41.560687Z","last_seen":"2026-09-04T16:42:40.133529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-59030018.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d592837d435fdc6b1e984dcff3db9d","sha1":"768383133d9418f4f41924c8459c497391609c20","sha256":"4f1b99a5c4f2c6507de371b3c2ae76dc735b6a761e707dddc202a640e2af0462","sha512":"72a088c4bdfbfa6340e0e3e14b9f2ce6557ac7c8a84bb6fb3a6f83509cef9459bc12b79d7d0ed87483c4a9e61f4a420cfe9527ca891b417491b1f26b8b9cd3fe","ssdeep":"384:p7bTitnpob7OlfEQFV3j+feIeJUGnC5A0WvBpNtt/oICl6S4:p/+GuiQRj+fezo69tt/oIC0P","tlshash":"3452a496f505ea3df4f7d060848c0011761d7fda900c8ca2b9be6d823396ff8b75aa58","size":14153,"data":"","first_seen":"2026-09-04T15:56:41.54152Z","last_seen":"2026-09-04T16:42:40.128981Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:58:43.071623Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:58:43.075095Z","times_seen":839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-04T16:47:15.090972Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-04T16:47:15.070784Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/filters-5f18d3d6.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3f354cb8307793bd1f845df5ebfd065","sha1":"1ce5481f56599236b30236ee6e044aff2f3dff46","sha256":"f219f5ac3042936a373d699450c113a5ba7cc1d27b6942e0f7d9b631bece1022","sha512":"3c801e80402ed91461d426aa02d68ae97f8dea5adf4c07b2491f8abe0c70c41b322ec7af934b949b9c009d8352a652b1c765d61bac4b5e9fee53fd35a0b2756e","ssdeep":"","tlshash":"756145edf8d3613356fe5de94028855172ceaf10785f0a4df54bd0055a23888e07fb64","size":3422,"data":"","first_seen":"2026-09-04T15:56:41.483198Z","last_seen":"2026-09-04T16:42:40.160696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/en-2fa61606.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"89c4c965181bbbd4c572aa3cd1533e0d","sha1":"a796a857e7e2405eb4c2bd9ec757deac1373b3a2","sha256":"01f5f39ee9545716422fc0739c651ba6fcc6d94c577123c9d53330b88ca4ac40","sha512":"9c65524fdc80e79dfb65c522a657167ea4d87e8ebdc6f45121337b456d8745a6bee3d20a76dac1d79806399d3b6d1310c34341902ca6fec432f364e0a45b02f1","ssdeep":"768:JY/4tZcEw/o7rKOdAgPsifnAMC2rAaAMEVoP6+6sPG9q1mwO6fpk7aOLxe:JwponKOdzbE2rdEVLsPWqqLxe","tlshash":"0513c7893e16889a04f3636774ce6e6024f50ac18255841f4fedc9fd53d2b67b3a7728","size":43895,"data":"","first_seen":"2026-06-22T17:10:55.726573Z","last_seen":"2026-09-04T16:42:40.134871Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"19a5d7d1ade3feaa08192c60e18ad06e","sha1":"e04b1dc5c8a67b5003caf5864cc17c4757e9d89a","sha256":"636b16b1cb26ec6d8b9a9369e17c3f983978e36ad9a499bb14215003de62090d","sha512":"efe6ebfd5f0d6475b9862921a0c4a5e3adbf254034527c71fef320ca7497a3a362030f2c04cb73ea3147eb5f87d7943b92b8a8fc64b0b3ca526eb6f965d33bf7","ssdeep":"","tlshash":"92c08cc4a0c76d202606765025bf38e490284027b8881b038c94d8682ea30b0c237e98","size":149,"data":"","first_seen":"2025-02-02T00:35:42.301728Z","last_seen":"2026-09-04T16:42:40.169994Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-09-04T16:47:15.093053Z","times_seen":644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-04T16:58:43.080429Z","times_seen":2258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/charting_library/charting_library.min.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:48:50.862494Z","times_seen":1463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-04T16:58:43.086983Z","times_seen":1774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-04T16:58:43.082307Z","times_seen":1819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-09-04T16:45:13.716222Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:47:15.088528Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-04T23:10:27.896104Z","times_seen":7783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-ce7bde16.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f52bcc302605bf1383b501e1215096d4","sha1":"55f0f781a712c77dfa27cc3b37a576b75d27b75a","sha256":"e39a6bdf1be4dbc8805555653e0d8498f7e4d3f26cf26c69d9a19d315c3b971c","sha512":"a8dd15aadc84bca4b7910d25a4fb82e8f5f54105ea67c7e6e11eaa29f02a2ff6f0a854825d921113f9accb8dd68e744e6cf38e13bf9341a6ec7561f209dc031a","ssdeep":"1536:Vfa1fyV+UFmqKnxcFtQNf5q3agxgPtAnpdTn2r02+Y/4O7:VSQV+UFmqKnx5q3agxgPtAnpNK7","tlshash":"a0a34c89950a1fff19bd4858a91a091020ac2fe799cc8c93b39e6f4637f9cd5239d71c","size":101539,"data":"","first_seen":"2026-09-04T15:56:41.522826Z","last_seen":"2026-09-04T16:42:40.132594Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/vendor-1d002a72.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fb9bfa74027d2f8728973476d5b78b2","sha1":"1cf0d5b19a1e46c91a3f987af28287c6a42f9fc5","sha256":"9ecaa11d37c39b62876ef82bf0f2a1ef123d163d06ef7b853a991af842f02798","sha512":"f9976b7b74a2d7f012b3eb1fdbaa31fda4af6c03d3376885c6878ad799d6d570a013e1934e12073432f800bd54fb6b793a097d8c7ea7ee19ea5e916b72cc36c5","ssdeep":"12288:Q49EWIf3c3JETG3Aj3no7ZAwX16DXYLtXwn4jpWQX8hrEnM4HC2S:Q49EWIkxwjIZAwXMDXCRnjpWQX8hN","tlshash":"5d152ac97692f06147ab24e240bb0006f3396e59740e84a4f16dd8eb7d79d89d2b7f38","size":939939,"data":"","first_seen":"2026-09-04T15:56:41.535928Z","last_seen":"2026-09-04T16:42:40.124177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-04T20:24:19.735408Z","times_seen":4605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-09-04T16:58:43.073183Z","times_seen":1902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:47:15.073098Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/currencyItem-95fb3565.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01b0dadb5e227bd98a704d34cb2a4e7","sha1":"b7f4f8645e270709768ec2e516c6c0a5b140a548","sha256":"d02dd4fc62a29c2d7d2a95ce31ec56da038bb3abaab0942895621549c8c528b1","sha512":"3075de2286755aa70edc60d90a0545124eb18c7b7b81d41e95e990823a217a8290daa6b280c830093d75f227f44c644be7065dde801e15a4f7626cfdf12f938e","ssdeep":"","tlshash":"1721f49a9902c7b1cbbe9062c17d4414170d7fda700185c1fbed048a3797afcd724a31","size":1206,"data":"","first_seen":"2026-09-04T15:56:41.491588Z","last_seen":"2026-09-04T16:42:40.158406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff3b235d98dffafc7ed0aa1d332fb355","sha1":"35bbd3ec2bde01b19dd6008bdc1d0bc304046ba1","sha256":"9f4cfcc2c4a357fb7b59d31bd9a1a35d6d9c8a41ade4355dc36babe850200a46","sha512":"6f2615651114dab0460eff12675506e65047c70b496a26bed020c0f15fe38fce8b7b720d33ce8d097287fcca681a203eeb1693bd017be87eca21394b92a20385","ssdeep":"","tlshash":"e5c08cc4a0c22e005622641014af28e4a034402ab08d5b52cd99e84a3e620b0c237eac","size":148,"data":"","first_seen":"2025-02-02T00:35:42.28685Z","last_seen":"2026-09-04T16:42:40.177979Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:47:15.083419Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-09-04T16:58:43.079784Z","times_seen":1494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:47:15.072307Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-2abc8f12.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2991d40b485f6c512c711b87f492ea79","sha1":"cecc3f4b9e1eb936c6243ef0ccafe2ec08fa5315","sha256":"91222758f331a32255b01a15eb65d7de0097a81f3048424fc7dd781ce3994ad9","sha512":"e34536356dcb40a8d6c339a8e33ff6b8e942953c53230cd10c20ba56f0434c33cbb8103f658de45d8b93f033b290895a1c520143bbb9d2ce36538e204e4f382e","ssdeep":"","tlshash":"1101fdf8fc0d8ebb1f6206800290250014091fddfa1405f198877e661be0940d7de72d","size":772,"data":"","first_seen":"2026-09-04T15:56:41.497381Z","last_seen":"2026-09-04T16:42:40.149942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:47:15.082595Z","times_seen":1093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/#/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-04T16:58:43.088435Z","times_seen":1910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btcua-exchange.com/platform/dev/config.js?1788540115711","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.912Z","timestamp":1788540115912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /platform/dev/config.js?1788540115711 HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FFQa493lnZYWao2%2Fcmq%2FPxAjWUm3GIjfd%2FyH8FVNIxxpZj9eMgYxStSQ%2B4ODwjXgXaVH4bvDOjedlyyu7saB8FJ6pWmFed9WHAbCIHxQcr3vNARANtFT2OKEu62BlnSicHUbJw%3D\"}]}\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:41:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6794485c-18a\"\r\ncf-ray: a35e71cc7ea256a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":1056,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-09-04T16:45:13.702686Z","times_seen":560,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":690,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp70d23b9002454a639978c9d141069c28.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.079Z","timestamp":1788540117079,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp70d23b9002454a639978c9d141069c28.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 235233\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6BC6A5B3732CCE16A\r\nAccept-Ranges: bytes\r\nETag: \"DCBA8E751E42AC3B70D483BFBD67F115\"\r\nLast-Modified: Wed, 03 Dec 2025 10:14:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18303680600351935807\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 3LqOdR5CrDtw1IO/vWfxFQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":235233,"size_decoded":235810,"mime_type":"image/png","magic":"PNG image data, 781 x 787, 8-bit/color RGBA, non-interlaced","md5":"dcba8e751e42ac3b70d483bfbd67f115","sha1":"5282969c37cf6b1abb5f6103a8076803c7750076","sha256":"bc5729d50917ead796ba66e479b61a9b0f640a0056f14f9e0938c91d29170a1b","sha512":"123575a91138fc035baff50275caa0c895e0f90840ca23176a25b2ae4e4e2dc6bff20d7dc0e3eee6e53c270cfc90606dbcd8ee10a50869042c5d3418f30bd72b","ssdeep":"3072:sQALj5TBd44C0eMkilC8ILeDkb95qV/yN/nmayDw0ThiBNsnA3NdwYSrsVo/p2Ur:RAL1TU9OC7SfA9mjf7YS5jqJJM4qd","tlshash":"223422ccf6bf4948bec368553a184271ecd2b998e031b4a097a6dc9f1bb4afd4915207","first_seen":"2026-04-27T17:19:29.861489Z","last_seen":"2026-09-04T16:42:40.121133Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1962,"timings":{"blocked":-1,"dns":15,"connect":269,"send":0,"wait":280,"receive":583,"ssl":815},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp94845980656744fabab1f166cacfdeef.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.103Z","timestamp":1788540117103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp94845980656744fabab1f166cacfdeef.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66690\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D66AFD3631328A0FA5\r\nAccept-Ranges: bytes\r\nETag: \"CBEC0CC4E6C68E40B434B233B215E994\"\r\nLast-Modified: Tue, 24 Dec 2024 11:10:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12580187144197897650\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y+wMxObGjkC0NLIzshXplA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":66690,"size_decoded":67266,"mime_type":"image/png","magic":"PNG image data, 780 x 729, 8-bit/color RGBA, non-interlaced","md5":"cbec0cc4e6c68e40b434b233b215e994","sha1":"88e001f3d4b9515ff1e3e2f74a42e6f8a93a4e6e","sha256":"9fb9dc9d37fa744cc8d6aa423121d44225784060d60e4375b19629f71974c2fe","sha512":"01f59eaa403a285ebad7b1cb3c4ae1be7cf9c13ac7910bcfe85186ea3f6659582fc20806d176d4c8a07e3f14c307fdfbc8e1857d983b8dfe58530716b1fa5a5a","ssdeep":"1536:0BaOua8IkqRbk8PxEFg6DubNAAnONpHKPDhxHu85+0tRLmxHEvC1Fk+:0BDtkqRVPKPqmXNxYFpu6+0tUxksy+","tlshash":"b053025ce35aaaa3c5cb21714d8c0e8168ad4a4f3c5362a6641030c71f7a5f2e7ec977","first_seen":"2025-02-02T00:35:42.264542Z","last_seen":"2026-09-04T16:42:40.122627Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1841,"timings":{"blocked":1308,"dns":0,"connect":0,"send":0,"wait":275,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/vendor-1d002a72.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.456Z","timestamp":1788540115456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/vendor-1d002a72.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-e57a3\"\r\nexpires: Sat, 05 Sep 2026 03:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2787\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGhRtseNQE30C1%2F%2FcT%2FWP5dw15SyNeQZU6wa20YwFqRBDnnjF5Ck%2Bvi7gZUq3xLaz2kniQqqVBv4h7zDYph6HEzGFZZgRs2mPucpka2un4qPqmgGPlXy2Zw%2FfG2Pi%2FY%2BdR6gzcc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e71c99e3f56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":939939,"size_decoded":343575,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1fb9bfa74027d2f8728973476d5b78b2","sha1":"1cf0d5b19a1e46c91a3f987af28287c6a42f9fc5","sha256":"9ecaa11d37c39b62876ef82bf0f2a1ef123d163d06ef7b853a991af842f02798","sha512":"f9976b7b74a2d7f012b3eb1fdbaa31fda4af6c03d3376885c6878ad799d6d570a013e1934e12073432f800bd54fb6b793a097d8c7ea7ee19ea5e916b72cc36c5","ssdeep":"12288:Q49EWIf3c3JETG3Aj3no7ZAwX16DXYLtXwn4jpWQX8hrEnM4HC2S:Q49EWIkxwjIZAwXMDXCRnjpWQX8hN","tlshash":"5d152ac97692f06147ab24e240bb0006f3396e59740e84a4f16dd8eb7d79d89d2b7f38","first_seen":"2026-09-04T15:56:41.535928Z","last_seen":"2026-09-04T16:42:40.124177Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef9b1eaa39ad4ce0a4d8910573c3671d.jpg?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.072Z","timestamp":1788540117072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef9b1eaa39ad4ce0a4d8910573c3671d.jpg?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 598\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6AFAD5B3737E0E778\r\nAccept-Ranges: bytes\r\nETag: \"CB1474A6586606366122E796E7C7B790\"\r\nLast-Modified: Tue, 24 Dec 2024 08:20:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 52651854032997638\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: yxR0plhmBjZhIueW58e3kA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":598,"size_decoded":1169,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"cb1474a6586606366122e796e7c7b790","sha1":"65e5b65ac7af71f7c74943cbbb786c502da79f51","sha256":"59ffe909363cd4f08954e3d43522913d7f06837b0a726f4f094d07e4443970e7","sha512":"24e9f1f19d63ad08cae741f4a599ed906a4b047498dd9805dd8a5ef69eecb48ba4beaebeee27f86e61b054c5b894da1da38e1ba466ee616a4de71d851d798faa","ssdeep":"","tlshash":"57f041ea69d79ad8a36c0fb3564205908447d0d0f305d7536459f7fd272074016b9a36","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:47:15.048576Z","times_seen":170,"resource_available":false,"data":null}},"time_used":1343,"timings":{"blocked":-1,"dns":22,"connect":261,"send":0,"wait":264,"receive":0,"ssl":795},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp374d71f606644086823f390382e21362.jfif?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.111Z","timestamp":1788540117111,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp374d71f606644086823f390382e21362.jfif?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D7AFAD5B3737ADEA78\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Tue, 24 Dec 2024 11:31:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":1595,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-09-04T16:42:40.126155Z","times_seen":117,"resource_available":false,"data":null}},"time_used":2734,"timings":{"blocked":2462,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getAllSetting","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.913Z","timestamp":1788540115913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUm%2FW4RJI42KZ%2FJlE1tAVP90eCXpqbHWTiE1UJF0IjRX2IVg%2FXG46s7lmcEZdzEbUjM2S1USK6%2BCLVuOD%2F2OQ5glATyxgXF3AIIUkHQUTHEh0027Xz8fBJQlJo4BLyW5FZSYJ%2FPr13rTT3Iy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e71d1089456c5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14131,"size_decoded":4745,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13758), with no line terminators","md5":"d521d7d0bf680ebc5e9acd54b1781db8","sha1":"cac67a7a14673dfdc540560820693d999fb165bd","sha256":"29f08de767959e27aa007105e6958f8176b44a28b97e1e18c75bd81c31fbcd0d","sha512":"e8e2a7fc9bdbb68e9621801ee30fe61ce4c1aaa7ec56f52b70e922c53d9c5b783b65bd686d07aa0ab6ee71ae230d71ef4d45547565a2c75181608fb563087647","ssdeep":"192:kLiKyJOSpQ+IGD+RbcuW2h9uqHWqLcELmjDJxhQ2J515dgzt2sYNsetVeqgzMNeF:tu8aULUp2/TUMoNjdF4b6x","tlshash":"e652336732dcccbec6e61dc580af7e59759c386bda80a845d8e5ef9c889d9b2440f00d","first_seen":"2026-09-04T15:56:41.525651Z","last_seen":"2026-09-04T16:42:40.127287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-59030018.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.921Z","timestamp":1788540115921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-59030018.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-3749\"\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=of9R3bEpmPtEZoH9pMWvBw7HSP2e8ujiuqwdv6wqDFjEsoPCI6ceVo5WdDLaPZzhnQ88eddFy315QtnYVlQ0I4%2BgggljfhCwPlOQMtdjKzG9LIK%2BtfGTb22eBRrOPDvhKXqAlkg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e71cc8ea356a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14153,"size_decoded":5031,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14136)","md5":"52d592837d435fdc6b1e984dcff3db9d","sha1":"768383133d9418f4f41924c8459c497391609c20","sha256":"4f1b99a5c4f2c6507de371b3c2ae76dc735b6a761e707dddc202a640e2af0462","sha512":"72a088c4bdfbfa6340e0e3e14b9f2ce6557ac7c8a84bb6fb3a6f83509cef9459bc12b79d7d0ed87483c4a9e61f4a420cfe9527ca891b417491b1f26b8b9cd3fe","ssdeep":"384:p7bTitnpob7OlfEQFV3j+feIeJUGnC5A0WvBpNtt/oICl6S4:p/+GuiQRj+fezo69tt/oIC0P","tlshash":"3452a496f505ea3df4f7d060848c0011761d7fda900c8ca2b9be6d823396ff8b75aa58","first_seen":"2026-09-04T15:56:41.54152Z","last_seen":"2026-09-04T16:42:40.128981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getCoinList","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.934Z","timestamp":1788540115934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Afq9%2FuLYzd8xvGW6sBu9VWteiC9FwqHMuI4NKrMoSwD%2B4TiOxmlK2t5sNCOtLiP%2BKf378ktyGMXime2kIJV7Muyn2odp%2BwRliwi0fDwYPujyz5VTI3C5pwMb%2FZm6VDvpusERFM54ZOyKMLjX\"}]}\r\ncf-ray: a35e71ccb85856c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":946,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpc645638eb9f042e097c493502cb47886.jfif?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.075Z","timestamp":1788540117075,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpc645638eb9f042e097c493502cb47886.jfif?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6794D103430216A04\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Tue, 24 Dec 2024 12:20:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":1594,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-09-04T16:42:40.126155Z","times_seen":117,"resource_available":false,"data":null}},"time_used":1376,"timings":{"blocked":-1,"dns":18,"connect":269,"send":0,"wait":273,"receive":0,"ssl":816},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/resource/svg/light/zu29.svg?2.0.1784404147579","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.088Z","timestamp":1788540117088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1784404147579 HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHdWsBfKDoTUaSf1nFcXxCqC%2F1%2FifEL%2BYJJuVqFiK0vDbzsGJWB67z4KZlgaGStelPFrJctz%2BPkQ7K753%2Bt2xHXAmtvRUY%2FPg4zOZYiVA%2FyePtNZl23lvz8ss61ZrupN0xZ%2Fbcw%3D\"}]}\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5,i\r\nage: 2782\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6794485c-348\"\r\ncf-ray: a35e71d3cfd756a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":1212,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-04T16:58:43.059064Z","times_seen":1001,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_bnb.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.095Z","timestamp":1788540117095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_bnb.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10384\r\ncf-ray: a35e71d5494eb509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"ce04d16efbaa543192615e13a7e5f7fb\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:23 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=X2NVtQtgNYSo2HCZEQ9V8tMnKLdQrTO8y6HEWUrG5mU-1788540117.3274562-1.0.1.1-.Gdaf4BYR9Q64S0dd53WaIVAx9suS_21nkixaIXFwD5N66T_kTIdNKOmU450y2wYQ7wT7Cp4Mzv6F8Zt4sxBr2LotZKp25rSrwgPJTuCa4443YYErL5DoiYJJiisCYYt; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"X2NVtQtgNYSo2HCZEQ9V8tMnKLdQrTO8y6HEWUrG5mU-1788540117.3274562-1.0.1.1-.Gdaf4BYR9Q64S0dd53WaIVAx9suS_21nkixaIXFwD5N66T_kTIdNKOmU450y2wYQ7wT7Cp4Mzv6F8Zt4sxBr2LotZKp25rSrwgPJTuCa4443YYErL5DoiYJJiisCYYt","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=X2NVtQtgNYSo2HCZEQ9V8tMnKLdQrTO8y6HEWUrG5mU-1788540117.3274562-1.0.1.1-.Gdaf4BYR9Q64S0dd53WaIVAx9suS_21nkixaIXFwD5N66T_kTIdNKOmU450y2wYQ7wT7Cp4Mzv6F8Zt4sxBr2LotZKp25rSrwgPJTuCa4443YYErL5DoiYJJiisCYYt; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10384,"size_decoded":11268,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce04d16efbaa543192615e13a7e5f7fb","sha1":"833ce284ffc85e0dac3ce2e2567cf2d7980ab9f1","sha256":"bc5207bb03a5312c2deec22bd4651d89257eec64fa8a036598df67699102d6db","sha512":"2cc7a3227d27bc8bf2ea13e0f7a63effe9165ad59e3549de1b03d6d44a833e56b7021531a47e09977f1220652625b6a817c9f09d1b027a776ed02a2c1e7e2612","ssdeep":"192:L89NAY5SmzbZ0KPw6XRiel0VM06UkRWrJeCY5rmzUZjYrOtPUxkL0O3b:Q+mzRPBRieq5ngWrJnfqjJPJ5b","tlshash":"0322c04c925132127af084057cc28a79905e335974bae1c5a99c165f3d3aceeef568a8","first_seen":"2025-09-18T10:45:14.088674Z","last_seen":"2026-09-04T16:42:40.131282Z","times_seen":17,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":2,"connect":3,"send":0,"wait":30,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf732b3e592414979b2d7c2b9d1d011b8.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.114Z","timestamp":1788540117114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf732b3e592414979b2d7c2b9d1d011b8.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 370023\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D7794D1034307D6D04\r\nAccept-Ranges: bytes\r\nETag: \"A381DB0B785A07066ABE9386956071F3\"\r\nLast-Modified: Tue, 24 Dec 2024 11:21:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11132760987835081693\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: o4HbC3haBwZqvpOGlWBx8w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":370023,"size_decoded":370600,"mime_type":"image/png","magic":"PNG image data, 1300 x 1054, 8-bit/color RGBA, non-interlaced","md5":"a381db0b785a07066abe9386956071f3","sha1":"fc780da65e5fa456d9d5f1597dcb1ac5c8288117","sha256":"c1808d5bfbe24674d0f471f033d44445ee28790a6755a8d5ed6c3bb546e91531","sha512":"10ec63f4cfb5319abd3e745afe02d45c511b4626e81685581b0a1b7ac6fccc5e5dc1f8a7c93454245201d2c42ca9176dd432614b619140679b57c4ae8ace3c12","ssdeep":"6144:2yOvTSv4EaxbYemICE9bvnKS4MoG7iki52QxkNapmhWO0Tz7sy5hJ0cmpg7l:2x+v4b+e1GSkuiki52Q6SmsOEB6O5","tlshash":"c874221aedd78db29feb2a636ad34ced1300731edb123a7260580f79fd6212812197d5","first_seen":"2025-02-02T00:35:42.267543Z","last_seen":"2026-09-04T16:42:40.131969Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3152,"timings":{"blocked":2486,"dns":0,"connect":0,"send":0,"wait":279,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-ce7bde16.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.455Z","timestamp":1788540115455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-ce7bde16.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-18ca3\"\r\nexpires: Sat, 05 Sep 2026 03:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2787\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxM4R6xNDFoVNIKv1bM5oev9Cr7J0z0nM%2BF4CVUXofdeb%2F7%2B3mazQ%2BCi0W8eLBDdBg4ORA4m6pibtRfpb4uegLx6jeuauL1nEHQp%2F9MY71vJWo3hKznFsuHu2W9dlfI%2FiPHGoYE%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e71c99e3d56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101539,"size_decoded":31598,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"f52bcc302605bf1383b501e1215096d4","sha1":"55f0f781a712c77dfa27cc3b37a576b75d27b75a","sha256":"e39a6bdf1be4dbc8805555653e0d8498f7e4d3f26cf26c69d9a19d315c3b971c","sha512":"a8dd15aadc84bca4b7910d25a4fb82e8f5f54105ea67c7e6e11eaa29f02a2ff6f0a854825d921113f9accb8dd68e744e6cf38e13bf9341a6ec7561f209dc031a","ssdeep":"1536:Vfa1fyV+UFmqKnxcFtQNf5q3agxgPtAnpdTn2r02+Y/4O7:VSQV+UFmqKnx5q3agxgPtAnpNK7","tlshash":"a0a34c89950a1fff19bd4858a91a091020ac2fe799cc8c93b39e6f4637f9cd5239d71c","first_seen":"2026-09-04T15:56:41.522826Z","last_seen":"2026-09-04T16:42:40.132594Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-23489580.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.922Z","timestamp":1788540115922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-23489580.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-11ce\"\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AeigSDbl6aI3sKlZjEI2G0YL40OR5ZSazCJPE7mphtYrMLKuspcUD%2B4wy44wZanSIeBLu807lixEK7%2Bs4bvNeNd7EVyizqAlGGhdjYxRCCR8BQwsCOOIJGGr947Gc9Kl%2Ftl3uzU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e71cc8ea456a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4558,"size_decoded":2866,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4555)","md5":"97364644a4cff47c57645a327e73c988","sha1":"d691cfdd462d0b83029626845eae5d703b39fb69","sha256":"77efcb0402063e5808172b49f6861c6a96f67b65b7ee6f8af0e8ce38168b1e09","sha512":"87abd4386772378718aabac37c7aef5bdfb7336f55e0cfd3d04108e5991caff77c841a028ed7f099fefb471dc57ce7a198a4f227e8669411a457efbbe2a0e3e1","ssdeep":"96:5MU57gPzRpnYfN13IqZqD+wnv6H1ItbCys1xH00LDh4IGeYmy3huOc3TNCFJtIF2:fiPzRhY1hIgqiwSItbo1lzemCh8TNzF2","tlshash":"5491b68cf80389baaa77589844550420328c3bfeb1294cf6f2fe8d4d67b4db6d784720","first_seen":"2026-09-04T15:56:41.560687Z","last_seen":"2026-09-04T16:42:40.133529Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getMt5Amount?coin=xau","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:56.963Z","timestamp":1788540116963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iy3i9yIHvhxbwx9cXNLK2l6Fe6Wzk8%2B0zwuE1zPO3gN9G2J6g6GSfYH0oEpG%2FUH3m%2Bu69Oa1N15jo2XYC3OFrjatHHZebi75cduFZdH7gjlf6jP%2FF%2Fpenb2dZQfCROvbgorEbuqh2h4XWIxV\"}]}\r\ncf-ray: a35e71d308a556c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":946,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/en-2fa61606.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:56.965Z","timestamp":1788540116965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/en-2fa61606.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-abcb\"\r\nexpires: Sat, 05 Sep 2026 03:55:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cioDSHj5D4Ydpbf2D3hmYeGzKn7tm8irIWRR9A8h2Dw%2F1YI%2FCNnO3MNkUvpLbOfal4Acm942AvVfLMCR8j8K3s2EVlNg%2BrEaNb%2B7OjnomloS1l6cG1ccwSGg5Eun3SNtPKs8bZA%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e71d30fc656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43979,"size_decoded":15950,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43792)","md5":"89c4c965181bbbd4c572aa3cd1533e0d","sha1":"a796a857e7e2405eb4c2bd9ec757deac1373b3a2","sha256":"01f5f39ee9545716422fc0739c651ba6fcc6d94c577123c9d53330b88ca4ac40","sha512":"9c65524fdc80e79dfb65c522a657167ea4d87e8ebdc6f45121337b456d8745a6bee3d20a76dac1d79806399d3b6d1310c34341902ca6fec432f364e0a45b02f1","ssdeep":"768:JY/4tZcEw/o7rKOdAgPsifnAMC2rAaAMEVoP6+6sPG9q1mwO6fpk7aOLxe:JwponKOdzbE2rdEVLsPWqqLxe","tlshash":"0513c7893e16889a04f3636774ce6e6024f50ac18255841f4fedc9fd53d2b67b3a7728","first_seen":"2026-06-22T17:10:55.726573Z","last_seen":"2026-09-04T16:42:40.134871Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/resource/svg/light/mengbanzu13.svg?2.0.1784404147579","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.086Z","timestamp":1788540117086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1784404147579 HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2783\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHG9FETIWAbc2QbjvCx1Tm2y%2BsYJcB%2Bi1J4pLVJJPXio3SyfnEeCAtvrYFAWh%2Be5SskZw86ZWiymyPWQDxmhs9blJsmkHBALRqVbfp%2FCy1EAQ2OVoA30I5hppA1Mb0oBf5KEzko%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a35e71d3cfd656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":1386,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-09-04T16:58:43.039933Z","times_seen":995,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_btc.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.091Z","timestamp":1788540117091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_btc.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7130\r\ncf-ray: a35e71d54955b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"36441b8c1738e01457c54a0056faa169\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:30 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=Dg30VDkwPvnKdxDvi4Gm54H9RKp39R3q16ZipIc3cEI-1788540117.3282998-1.0.1.1-hufL0mmDapnPC2qyGoPW_INeqtX5FP8qmZIt_1X0r7FhBEbQobt1c3jSySUV1E0bFhcgkub9gzQ1Oi0aHG0z5bUQikE1IM.iNFdkKY7ukrNg7IsOqopC8n3SHGyByPrS; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"Dg30VDkwPvnKdxDvi4Gm54H9RKp39R3q16ZipIc3cEI-1788540117.3282998-1.0.1.1-hufL0mmDapnPC2qyGoPW_INeqtX5FP8qmZIt_1X0r7FhBEbQobt1c3jSySUV1E0bFhcgkub9gzQ1Oi0aHG0z5bUQikE1IM.iNFdkKY7ukrNg7IsOqopC8n3SHGyByPrS","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Dg30VDkwPvnKdxDvi4Gm54H9RKp39R3q16ZipIc3cEI-1788540117.3282998-1.0.1.1-hufL0mmDapnPC2qyGoPW_INeqtX5FP8qmZIt_1X0r7FhBEbQobt1c3jSySUV1E0bFhcgkub9gzQ1Oi0aHG0z5bUQikE1IM.iNFdkKY7ukrNg7IsOqopC8n3SHGyByPrS; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7130,"size_decoded":8013,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36441b8c1738e01457c54a0056faa169","sha1":"ba29760bded8c06b8889b58ec58f149101b69653","sha256":"5c2068d84042e001d833bad39a7f4294e69aedb0802a3d6c6c80a54efc99379d","sha512":"61c9ccca1e309dd7c8cc88da2432749fd3a8c905fa919f2df85321a9686353d7a53e8eac0fdd9bfa3f13f045d1ebacebd0f93a385ccace59994c23f6d03b0f57","ssdeep":"192:AVP2cjhWtsbV+EwEAO3HqulF0V5qCCKcDcqbpDU:AVucjhWto+EWIOnT9cB2","tlshash":"4ee18ea762a59c6231214624fc8a59627567c022b0776993bfb8187672c5b3d7380b8a","first_seen":"2025-06-04T17:05:58.570745Z","last_seen":"2026-09-04T16:42:40.136268Z","times_seen":49,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":26,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getMt5Amount?coin=xau","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:56.961Z","timestamp":1788540116961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzoKtQ0T3J4kyLg6ycRKz2tvQrWoMFKepQ7UrpMlMv%2FX7lWYiWNQXAF1g8XdWtKiTfktfdo7n5SFPqqz2yLcmHzKPcYKWfUhrNYOZSD8fbx04n%2F3OLJeuGRDxzBb2p9gaUYECRBXE7L96OI0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e71d4e8bd56c5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":959,"mime_type":"application/json","magic":"JSON text data","md5":"6301544e131ce7cc9db0c6faf76170b0","sha1":"789b37d507c1ed99d186de1de16b6195ed0f4996","sha256":"90fcb2abeb4806057404f7db8e6fabfe407252e1b898f0732ad7391723e49b61","sha512":"a41d076c6e40ac433dc83929bf861af351193187f7b495dbdb3d44332b6ab171e23ed92a4e0cbd4ea803aa519ae0379004769cc727f1b090c704772cfd199ba4","ssdeep":"","tlshash":"e09002551c188242e88305a596165248002431602a6492484c595325808c1732040898","first_seen":"2026-09-04T16:42:40.136996Z","last_seen":"2026-09-04T16:42:40.136996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/resource/fonts/DINOT-Medium.otf","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.107Z","timestamp":1788540117107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btcua-exchange.com/assets/index-05d2f786.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2783\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oL4Yu6X2eKYDScdNdMgFGqk9Kdu9%2BM1PdiM2NvykMA9cUgxkQ9WPXloEaJ9O6fqsvnz8%2F2eCeQazdsOs8wwOrBKD2%2F8zdDAl5wOmX83scDKNunrXW7AtBELJ3lXlQc6qdMG2Ks%3D\"}]}\r\ncf-ray: a35e71d3ffdb56a2-OSL\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":73863,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-09-04T16:58:43.056716Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/vendor-4403ead3.css","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.457Z","timestamp":1788540115457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/vendor-4403ead3.css HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-16c33\"\r\nexpires: Sat, 05 Sep 2026 03:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2787\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7uvO%2FuqDUaFtjEykg3lbbAkn4wjE6cG3vUj5kvZX5GxN1cOsQbEChUrsSJuAXacTwWN%2F6glf9vSlYM5d61LbLt9XlxPPE9XqsLxxK1o5MyV4QGTr%2BF2tbaPaaFRmzMN44nnU%2Fk%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e71c99e4056a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93235,"size_decoded":40515,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"3f2c7c11bc75e1c780824010f462b032","sha1":"0acc763f04d5838b2b029b341b5104a89ee0c585","sha256":"4403ead3789b29ab48a876aeffabd2dbbae4822829cedabe40430d5365d0f6fb","sha512":"63db33655374dbf69aa50bd7f88200ff2ffb5f4272eca9ccd54787d715f7bedb42158711908985c0ee887bcfc3d6dc1d1556be767966f4665b38012d989413aa","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Lb:BnNIClDsIxuVS83b","tlshash":"1a93d4a5a5c461fc6f2ae2659b8766e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2026-04-27T17:20:10.611354Z","last_seen":"2026-09-04T16:42:40.13914Z","times_seen":16,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/resource/fonts/Arial.ttf","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.524Z","timestamp":1788540115524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btcua-exchange.com/assets/index-05d2f786.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 14 Oct 2024 01:55:32 GMT\r\netag: \"670c7a14-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqz2Rsyvk9VvTwwNb%2BinoH6zDl2mPRmjjxBAtS383bIPSKtREsjKC6NMnAjTDXM9ZapbRR4mCwSF7%2FcMs02n3c6zfVviVCtgqCsFi5MopUo%2BA1Lq%2B5kzPXc11aB64PykZds%2FjNs%3D\"}]}\r\ncf-ray: a35e71ca0e7356a2-OSL\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047785,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-04T16:58:43.029725Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:56.967Z","timestamp":1788540116967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDkTwPdxZiWT%2BWrH7UkPUopX159%2BPX%2FCtrCWUbYPFJQg0FQoQBnLC0G2h%2FllNHZu6nXNelfyye4zvM%2BX1e44hdRJ7xdqnkxXeOX9FQ2G3AUVne4Jfm6r7oy4WzwDL1qz1rXSdTrzjBWdi29R\"}]}\r\ncf-ray: a35e71d308a656c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":946,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_matic.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.097Z","timestamp":1788540117097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_matic.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9100\r\ncf-ray: a35e71d3ffe9b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"2e6ba46e130c47793f56e9d5693caff7\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:27 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=7JrRiJHX5snJ_etrT.TQ.G2zC7422AnH4nTCTM3k_AY-1788540117.120233-1.0.1.1-a3LKRTc3mjIbwPihdZ.8RtRCCBUdanv2fbp1D1iS1yL5pmXjQ2Rgjr_wD2_853uPN0XMRERPoJqG5kCjZJqcXaHN3.paXVClWLwnH3XfoS4_ulJK7EgoLO22IbDB0rJ.; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"7JrRiJHX5snJ_etrT.TQ.G2zC7422AnH4nTCTM3k_AY-1788540117.120233-1.0.1.1-a3LKRTc3mjIbwPihdZ.8RtRCCBUdanv2fbp1D1iS1yL5pmXjQ2Rgjr_wD2_853uPN0XMRERPoJqG5kCjZJqcXaHN3.paXVClWLwnH3XfoS4_ulJK7EgoLO22IbDB0rJ.","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=7JrRiJHX5snJ_etrT.TQ.G2zC7422AnH4nTCTM3k_AY-1788540117.120233-1.0.1.1-a3LKRTc3mjIbwPihdZ.8RtRCCBUdanv2fbp1D1iS1yL5pmXjQ2Rgjr_wD2_853uPN0XMRERPoJqG5kCjZJqcXaHN3.paXVClWLwnH3XfoS4_ulJK7EgoLO22IbDB0rJ.; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9100,"size_decoded":9982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e6ba46e130c47793f56e9d5693caff7","sha1":"7231195e92dc745cb9afeb281390c1a9afde5ea5","sha256":"9407be0d1edf6804ad98f7a65f7ee8ddd843c0ae8f148342e03bfb759fa4f62a","sha512":"3903b073bdcc852f833e529ec13f43a402aa4d2cf2f72044dbbd1710ccbe085a672dd9abf266073def0ef88c95c99ad38ca5a31ccb2c30bde7ca3bf1cce653bf","ssdeep":"192:s89NAY5SmzbZ0KPwIBzpMweq/PQpvAt8vVvaaSrBUkvdX:t+mzRPnpxJnQNAt4aaSrdX","tlshash":"9112af0c4d9e70e3727cd53018d2b905dbae5c16a24bb93055d9c61b3b9cdae2e3d9e0","first_seen":"2025-07-08T11:50:11.508348Z","last_seen":"2026-09-04T16:42:40.140384Z","times_seen":37,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":27,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/type/defi_activity_type","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.129Z","timestamp":1788540117129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FdfT1koAWH%2FLKyQf%2BStp49fe6I%2BTlG7X8UpYX9dIRfKy62ZInkO6l8vwbT0GIgG8xuDNZjqkaFimMdhlOcxWuLR5V%2FMfykFjxNFd4aeR1VuaWc1LNs6FQ7ENf%2B932SMjQMS8jPMv6JxwP6Q\"}]}\r\ncf-ray: a35e71d408b556c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":958,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp50644c0106804fff807043c011df5dcc.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.083Z","timestamp":1788540117083,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp50644c0106804fff807043c011df5dcc.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4156\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6AB67323831E36872\r\nAccept-Ranges: bytes\r\nETag: \"6EACCBE342331873E7839346D6585267\"\r\nLast-Modified: Tue, 24 Dec 2024 08:23:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11554986239130893210\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bqzL40IzGHPng5NG1lhSZw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4156,"size_decoded":4731,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"6eaccbe342331873e7839346d6585267","sha1":"e29f62572e89433c11a3411666b19161c2ec84fe","sha256":"094281ddb2a43d70d594f6be2c563dd9845f7f76d3746e784890de649ce92834","sha512":"07e216be324bf27b5c665b80d75df3a8173a2a9c4d973b41487dedecae6b357984116053fe72489907ab69fca3d8a99ab778a58d7196a470e73f7164a9a6ce43","ssdeep":"96:CzVgiwHNn39IYIY1bLqK8aKYdEIx8+u0wdMMc:MVNEn3QmdKYKIS0wdMj","tlshash":"1f816dd024df68d215011c0aee38b5abaa51fe4e930eb102f9745614fb3595e1f05d88","first_seen":"2025-06-10T04:00:52.585709Z","last_seen":"2026-09-04T16:42:40.141037Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1596,"timings":{"blocked":1325,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_trx.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.093Z","timestamp":1788540117093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_trx.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10598\r\ncf-ray: a35e71d54947b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"4493b31c10b681f06ad4fd66fb36bc17\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:24 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=N0TeX8m1AEiTrvFDaHW.D3KICb4lNxmW_2ZfsJ7z.wk-1788540117.3265355-1.0.1.1-6sFv6aiOW.mR8Q17aIZlwlAul4U1tc.ajoQvIj9wAYm.qDTInYWu1CKpuSChHagoRer39YkiXCPQvSDhmsbMbyuRmZP61qoiAkmubPLVUr1HdYzVk851BvajVsyRcoco; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"N0TeX8m1AEiTrvFDaHW.D3KICb4lNxmW_2ZfsJ7z.wk-1788540117.3265355-1.0.1.1-6sFv6aiOW.mR8Q17aIZlwlAul4U1tc.ajoQvIj9wAYm.qDTInYWu1CKpuSChHagoRer39YkiXCPQvSDhmsbMbyuRmZP61qoiAkmubPLVUr1HdYzVk851BvajVsyRcoco","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=N0TeX8m1AEiTrvFDaHW.D3KICb4lNxmW_2ZfsJ7z.wk-1788540117.3265355-1.0.1.1-6sFv6aiOW.mR8Q17aIZlwlAul4U1tc.ajoQvIj9wAYm.qDTInYWu1CKpuSChHagoRer39YkiXCPQvSDhmsbMbyuRmZP61qoiAkmubPLVUr1HdYzVk851BvajVsyRcoco; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10598,"size_decoded":11482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4493b31c10b681f06ad4fd66fb36bc17","sha1":"7dd63bfb69e872c098cfefd05a12c2a303ec7622","sha256":"5fb5b00621008c4d9285796f63dee0ad9d9ce244edc8704fc23415e69b886198","sha512":"526eeef55cc755adf804c41badd07169ce20a497a420cd518f7566e294e9baea43a25e6cb669859dfa876916268a442d8521ed99c936a63cc5dddd6497089a4c","ssdeep":"192:g89NAY5SmzbZ0KPwnM3Y3suMnJc1Z+oh5YjTQL5Uq+upP7/OgsbCQwz9:x+mzRPA4aMJc1E3G3zz5sbCbz9","tlshash":"3422c00419d49127713c4063ac96213bd5899266006c2175dbcdfb23f72fabd4dd5cf8","first_seen":"2025-06-04T17:05:58.587825Z","last_seen":"2026-09-04T16:42:40.141763Z","times_seen":46,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":27,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2178ca4d6d8341ffaf1c36e227cda617.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.105Z","timestamp":1788540117105,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2178ca4d6d8341ffaf1c36e227cda617.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35354\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D7BC6A5B37326AE36A\r\nAccept-Ranges: bytes\r\nETag: \"A2CDC1CDD4AC11CEBA881FC9CC8DACC0\"\r\nLast-Modified: Tue, 24 Dec 2024 09:47:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15221090416855285112\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: os3BzdSsEc66iB/JzI2swA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35354,"size_decoded":35930,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"a2cdc1cdd4ac11ceba881fc9cc8dacc0","sha1":"2d16875ea02c9fea71b2ae41c1e79c4281c58dad","sha256":"c5d8a3c59d24a3da72ea65c63f5b7f5a4262706e1f3ad57e187f57a27c4081ff","sha512":"c88d03a3c1d7195d2948c53319bbd614a0adc02f81f4dd3eb528daa3fe23c41a6e7985ade393eed5fe32de7a675ecd7d53e6806a4a3501e976bb18633b20ba42","ssdeep":"768:wAA2B89E7+jz9SRBCukz5+TdBIPjFbbxEcixNcqSLvEevQl:wGe9E7+jzcBv8+JwjBxEci0qzl","tlshash":"98f2e0665f021f1ac6b923756c1f661c6cf740a2e7c4285ef422c0babd1b2729163b0b","first_seen":"2025-02-02T00:35:42.26129Z","last_seen":"2026-09-04T16:42:40.142678Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2220,"timings":{"blocked":1917,"dns":0,"connect":0,"send":0,"wait":282,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpc1a7ee959e114743bffe8499c8ca084f.jfif?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.113Z","timestamp":1788540117113,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpc1a7ee959e114743bffe8499c8ca084f.jfif?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6794D103430736B04\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Tue, 24 Dec 2024 11:31:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":1594,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-09-04T16:42:40.126155Z","times_seen":117,"resource_available":false,"data":null}},"time_used":1894,"timings":{"blocked":1623,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-05d2f786.css","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.459Z","timestamp":1788540115459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-05d2f786.css HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-4acd3\"\r\nexpires: Sat, 05 Sep 2026 03:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2787\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYNtbjX0lPnSN7QKKJx9AA159Tnm3T%2B6PdEWTGyHwai28KyrVvS9a7q1CRgAnXWkPgRHPl6%2Bih210QEUnn3ooKOX7D%2Fc%2FqchsjU%2BMZbunOwAXLCklMn2mBp6lRbm%2BfKjDU7iGNM%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e71c9ae4156a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306387,"size_decoded":75768,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"88568edd0ee35ad23861b3548eb04fe7","sha1":"87bc28e84d02692355b8489e5d7b3a04aff4a6f3","sha256":"05d2f78674d36ea25b0d8f88e1a38f5e7ce4629481f88ab39c572b8bd819f98d","sha512":"3689efbcddf9771d97d44c7ecddd5e222d610a3595c82c19c9553197779fef0e57afbb3edc70b33ea95b747333f5783dd3304e456523507e94175e3df1c980d7","ssdeep":"6144:nevxsaTJ03EkZ8w71ZACkFDS3vyf58rBeV05T5:ev1+3dZ8w71ZACkFDS3vyf58rBeV05T5","tlshash":"0554d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-06-18T15:46:55.823345Z","last_seen":"2026-09-04T16:42:40.14328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-bc011be9.css","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.925Z","timestamp":1788540115925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkFz8ATP6qMP3H%2BdnEX0V2yhDgSSlfZ4Ko4xro7w0KQK7qHEnPE6IowslSldOOBqBT4T5ueWPI3VFnztNdjP7TQY4pDI43bqAgEclrCt4xXvQqhxoDSM0Oy08IRZ75NWb1QMToY%3D\"}]}\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 2784\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a5c8172-18d\"\r\ncf-ray: a35e71cc8ea656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":964,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:46:51.693515Z","times_seen":1564,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp20049a645549464b87b5cef93e748deb.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.067Z","timestamp":1788540117067,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp20049a645549464b87b5cef93e748deb.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 889531\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6B1E82331394F1F34\r\nAccept-Ranges: bytes\r\nETag: \"4B1898172CB1EEAF2ECBD8412928C0EB\"\r\nLast-Modified: Tue, 24 Dec 2024 12:19:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11895756006205167554\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SxiYFyyx7q8uy9hBKSjA6w==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":889531,"size_decoded":890108,"mime_type":"image/png","magic":"PNG image data, 1500 x 1754, 8-bit/color RGBA, non-interlaced","md5":"4b1898172cb1eeaf2ecbd8412928c0eb","sha1":"a05c023847e29f70e042c4788df07833d4338dd0","sha256":"83823e3b79d6c3c31c87e70a8a12a9748aeba734127d28bcbb3c76968ac63384","sha512":"75d863253a0e6b37769e3021684ae3c668156addf98882556ff017282ec80aba4ea1f5b4345d209152a976283f43fa0ace513c44e3b0c17414b827420010c266","ssdeep":"24576:bFQ2JyUMYq4OGvr3RYroLjJRoGRRMTyfnBfmkCY:BQ2JyUMYq4OGv1YkLZMkukf","tlshash":"c91523bd42df6a40c95f7128e9e2354306ac6a01c26e48fbd476799c74793ba211cfcb","first_seen":"2025-02-02T00:35:42.280454Z","last_seen":"2026-09-04T16:42:40.144494Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2601,"timings":{"blocked":-1,"dns":25,"connect":274,"send":0,"wait":285,"receive":1187,"ssl":831},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:41:54.511Z","timestamp":1788540114511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 18 Jul 2026 19:58:45 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zji6FIAABhu5UlPrnTx4AAylkAnf5pE4DIXQpgbsgLX1wDXQBEOa%2BDObXJVP9s%2FfdUg7Dgh7OooNqeikqh8UW2z%2FgSadYjmC%2B9HLthSKHHKSHk7%2F%2BF1sY%2FJf40LnO3tJ%2FdRmB0U%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a35e71c3fdf056a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7438,"size_decoded":3552,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"fc19da09ed048fc4934b6583649522ff","sha1":"d42f781533a42c8196d2ef6c8303f0ee7611354f","sha256":"f6688d2724b6d44ea2db713da8e42c5cf64a810b4ead707541730d43cb2215a3","sha512":"12aa01531a8afb4c44036d3fae322c763dd214e018527f33e7409733dd23d08771f37d4b247f68cc9535b6fe4274206491a9094a59a07f85707a86bbec01173a","ssdeep":"192:TFQlL67u9Pyg8ZW3ZCxfcv2nfD3bpuB1niLibf0PfQUYSfDc:aUeZCxC2uiGbYSSg","tlshash":"49e183bba8f1a8262252453b9bdff5082a6200834209cc1074dde5e94fd5fe685dbbf5","first_seen":"2026-09-04T15:56:41.555785Z","last_seen":"2026-09-04T16:42:40.145152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":0,"dns":12,"connect":23,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getCoinList","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.915Z","timestamp":1788540115915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1Gb%2FAqWxdvoCqxQDXDI%2FAh5gEF1cKI9BQiwkkF1ywnKwbKBxIJp%2FdWrBmrHdOYEJE9cwM50tXgKEcSRZYpMrkrM0d5CYUdTnHpEmKwawLZsQxU8CddOdjG3cxiILSv9p4q7rvLHcFyfqxzq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e71d1489556c5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22458,"size_decoded":3514,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22442), with no line terminators","md5":"22658d0fed8adc3238abcbc4f7f2e211","sha1":"d44dc6dcc91d530f149e81a47014b69dec170bb5","sha256":"0eeee57a9886b314dbab18124f5088882252ad686db625acc53cadb217d839be","sha512":"f97e8a1535b48c2811e368c91e5fcd0b199748f9c7a7d761b2a1b398f9f23088935f6fd157a8c9ece05b922c2d6d5389515653a0d4bd9751586079e03d5bbc06","ssdeep":"192:kX1qiXmZcXUfWX8AXZWSX/v0X0VXbuXpWXwmb5Sjnguhnj9LAVCKAK7kzvkYfVwD:o6e0rSH","tlshash":"f6a21056052c99becd3ed1d21eaf7d42518d333facd6ca1e87c94d888ed5ab0250af06","first_seen":"2026-09-04T16:42:40.146104Z","last_seen":"2026-09-04T16:42:40.146104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/platform/dev/logo_144.png?2.0.1784404147579","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:56.317Z","timestamp":1788540116317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1784404147579 HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-b5c\"\r\nexpires: Sun, 04 Oct 2026 15:55:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2783\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2Bg4NyFYGGwivY%2F2b4bkrvQEPlmMYhU%2BzrHtPd58MfVa4I9jBTSgvwhug8U%2BvHdU1NKiRT6gfg9exh00fAc0CidivPTEsYuZiIF5hMNZkJtWpDv%2FKIZwmokKnrc3SP%2FJyLEWdVE%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a35e71ceff0156a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2908,"size_decoded":3738,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-09-04T16:45:13.651252Z","times_seen":321,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/resource/svg/light/mengbanzu12.svg?2.0.1784404147579","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.085Z","timestamp":1788540117085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1784404147579 HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfW5xTXv1qhWUyxWqwJptRQz2%2BP2rcRApjO6ogpzLjTX7aXJDCfr6lV%2FAbw0Hc1W4B2si03TRCjHJAyK5uZJBmMKXQcv01DZ8bpeAh0LH62WSi64pbltjYKAE%2Fe2sTqXD38PZKE%3D\"}]}\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5,i\r\nage: 2783\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6794485c-322\"\r\ncf-ray: a35e71d3cfd556a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":802,"size_decoded":1205,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-04T16:58:43.025465Z","times_seen":1063,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_doge.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.094Z","timestamp":1788540117094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_doge.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11836\r\ncf-ray: a35e71d54956b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2777\r\ncache-control: public,max-age=86400\r\netag: \"eeef89eabae7e3d8650ad2150e3b0887\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:04 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=FWyygmeomsuure.sJEDrTQ._IwTQdS6sjyBDSalJ92M-1788540117.3290894-1.0.1.1-iOe8p0c3uWcywOI9z20GxnRk.XjOaNzTayvhPEY7071JjubjkmJu6qPRdPnNCTcdt.dAgtqgjRPn2YO_oUHbtk.NWfIayQzhU823gzWT7VY2FdheZavSz5JxVqIUquTV; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"FWyygmeomsuure.sJEDrTQ._IwTQdS6sjyBDSalJ92M-1788540117.3290894-1.0.1.1-iOe8p0c3uWcywOI9z20GxnRk.XjOaNzTayvhPEY7071JjubjkmJu6qPRdPnNCTcdt.dAgtqgjRPn2YO_oUHbtk.NWfIayQzhU823gzWT7VY2FdheZavSz5JxVqIUquTV","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=FWyygmeomsuure.sJEDrTQ._IwTQdS6sjyBDSalJ92M-1788540117.3290894-1.0.1.1-iOe8p0c3uWcywOI9z20GxnRk.XjOaNzTayvhPEY7071JjubjkmJu6qPRdPnNCTcdt.dAgtqgjRPn2YO_oUHbtk.NWfIayQzhU823gzWT7VY2FdheZavSz5JxVqIUquTV; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11836,"size_decoded":12720,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eeef89eabae7e3d8650ad2150e3b0887","sha1":"4edbaf7375d0af99116a391ad05ce98df9675395","sha256":"4bdbc7b214c49dbaf4c47428bf65301a06cc3d7e2ea0eaf13f64b6fa626f461b","sha512":"6347ee0956bd315606524e13dac38c0878658bf1dc4e3b1693bd320baa3e4ca43f8938624e1485fb7d581e280d2ea3b542a8d0ba49ccd79653de4a6dd6c5dd8c","ssdeep":"192:NDYjjEzY6uP/p8RE7wCgS7ug6EMFsY7VD4xmKwTkf/oyZazAo+eNKQ1jaTA5ugm+:BYjwzYjxEEHGgdMuY7VD4xbwofjkAozv","tlshash":"6832cf2bb430a17abc3d5bc38ce394ad3f41c3bad99228ce6e8c5452f6aa417d506305","first_seen":"2025-06-04T17:05:58.489322Z","last_seen":"2026-09-04T16:42:40.148672Z","times_seen":47,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":3,"connect":3,"send":0,"wait":30,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_ltc.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.101Z","timestamp":1788540117101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_ltc.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7038\r\ncf-ray: a35e71d3ffdab509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"80566bf46c37249b2a0592f55edefa73\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:23 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=Fumxx.2sGGA_OGt12qVbtc0zK.cqO92yHiDkJJo1.Io-1788540117.1150868-1.0.1.1-xjngu.UdT9Fk0Js8Oq3.q4u7m55wfjv80KtuL14xebSgyGtXzXb.wYDpATvh_zllTTEmCMxF8xxYYIDipQGygdm_9vV9jaSVVOWNIYQRvEWGQiVKkv5vauI5L4l4DiSx; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=lN6OyaZAq2ixeWkclFKOLjERL7IUo6B9RXHKeYQgQVg-1788540117.1150868-1.0.1.1-qqL_8BzfE4ZAM9tC8NXOKB1AqsDHXqnQz65XVHCSFEU2EUa58GAg2GmwKwwcuMVoxKDZD_erz87vPo_HK_fc7a18woFG1GVEoAKNPDDKziOPKVpgXjoLpAVfbK2A47xHnOOyMLg6xzWyE2fDVR4zmvbb1UsO5maaGYqdTNPzP6slBL.CeLGt2zfQree6urbY\"}]}\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=lN6OyaZAq2ixeWkclFKOLjERL7IUo6B9RXHKeYQgQVg-1788540117.1150868-1.0.1.1-qqL_8BzfE4ZAM9tC8NXOKB1AqsDHXqnQz65XVHCSFEU2EUa58GAg2GmwKwwcuMVoxKDZD_erz87vPo_HK_fc7a18woFG1GVEoAKNPDDKziOPKVpgXjoLpAVfbK2A47xHnOOyMLg6xzWyE2fDVR4zmvbb1UsO5maaGYqdTNPzP6slBL.CeLGt2zfQree6urbY\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=lN6OyaZAq2ixeWkclFKOLjERL7IUo6B9RXHKeYQgQVg-1788540117.1150868-1.0.1.1-qqL_8BzfE4ZAM9tC8NXOKB1AqsDHXqnQz65XVHCSFEU2EUa58GAg2GmwKwwcuMVoxKDZD_erz87vPo_HK_fc7a18woFG1GVEoAKNPDDKziOPKVpgXjoLpAVfbK2A47xHnOOyMLg6xzWyE2fDVR4zmvbb1UsO5maaGYqdTNPzP6slBL.CeLGt2zfQree6urbY; report-to cf-csp-endpoint\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"Fumxx.2sGGA_OGt12qVbtc0zK.cqO92yHiDkJJo1.Io-1788540117.1150868-1.0.1.1-xjngu.UdT9Fk0Js8Oq3.q4u7m55wfjv80KtuL14xebSgyGtXzXb.wYDpATvh_zllTTEmCMxF8xxYYIDipQGygdm_9vV9jaSVVOWNIYQRvEWGQiVKkv5vauI5L4l4DiSx","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Fumxx.2sGGA_OGt12qVbtc0zK.cqO92yHiDkJJo1.Io-1788540117.1150868-1.0.1.1-xjngu.UdT9Fk0Js8Oq3.q4u7m55wfjv80KtuL14xebSgyGtXzXb.wYDpATvh_zllTTEmCMxF8xxYYIDipQGygdm_9vV9jaSVVOWNIYQRvEWGQiVKkv5vauI5L4l4DiSx; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7038,"size_decoded":9158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80566bf46c37249b2a0592f55edefa73","sha1":"e8170cef7e071f5c12337efb38c8c950a660b916","sha256":"c2cf6c63f82500f3ed187b88c26220f4c815145d8c562f755b86ce0c7ed7d3a7","sha512":"eaf9303323356cb3bbcf46b5c340e9d74a00059787e7159328b75ab8eeba8b3a5a90273cceb4dd4de7d0a74e3df4c752766828a0180f2c21a2fdb5d579eb9764","ssdeep":"96:AJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjU6MMJEypjaYm+zAf0WmJRog8CJ3sGA0v:m89NAY5SmzbZ0KPwJJtaYm+MfOAIcG","tlshash":"5ae1ae89d6f0d09b6ffc0007b560d24eb8cde1346589ad063faddd5fad1a81f2e15a40","first_seen":"2025-06-04T17:05:58.618444Z","last_seen":"2026-09-04T16:42:40.149284Z","times_seen":45,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.126Z","timestamp":1788540117126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHKgzwKBk7tRaNBoSGjmS%2F1UTaArXFMPv8TdOW3mlPlTazmHUh2kjnOpf7vtqfrWBgOZ%2FU00v7uGcDYGhAFAp%2BPh2FyJaqvv9qZ8AjUtUrQJUImuiWhyCzxKs1ou43hBtThOL9AoksfDypmt\"}]}\r\ncf-ray: a35e71d408b256c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":952,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.btcua-exchange.org/ws/970c1ad1-d3a9-4c93-bad4-d8455a4089bb","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.903Z","timestamp":1788540115903,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"GET /ws/970c1ad1-d3a9-4c93-bad4-d8455a4089bb HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://btcua-exchange.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MRstLeYQOTXxcxPuuqEp4g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 16:41:56 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btcua-exchange.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 0qMUgRnlkrz02AQaim/UeSnVhV0=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WG2%2FPfMJaPMWUXYFxTXVRJGGGTsfCKwsl0snj%2BwbHliaqWxqdbvLa7UN6qZgxsGQIqNbKFu44lI5pkDlctUXGA4UjO%2BmJqd3%2BhHj6qTpiLXWHuzJ2z%2BsEbMGGifN6epArUmYHAaNpaHq4DHI\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a35e71cc9c0549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":895,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":25,"connect":22,"send":0,"wait":672,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-2abc8f12.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.924Z","timestamp":1788540115924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-2abc8f12.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBFoCZ%2F20VHinDZ3Z0wWf9y8sA90X%2Fzgsz4bqHuJ14cnzYuFZMGMNWsnaTZIM7R6QGPrvB6aDcfVC5yn9dxQisjehi8fDFHBlRJOydmoD1ZJWMyYKO1iBdPLZh0UkwU5mCq4tak%3D\"}]}\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 2784\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a5c8172-304\"\r\ncf-ray: a35e71cc8ea556a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772,"size_decoded":1265,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"2991d40b485f6c512c711b87f492ea79","sha1":"cecc3f4b9e1eb936c6243ef0ccafe2ec08fa5315","sha256":"91222758f331a32255b01a15eb65d7de0097a81f3048424fc7dd781ce3994ad9","sha512":"e34536356dcb40a8d6c339a8e33ff6b8e942953c53230cd10c20ba56f0434c33cbb8103f658de45d8b93f033b290895a1c520143bbb9d2ce36538e204e4f382e","ssdeep":"","tlshash":"1101fdf8fc0d8ebb1f6206800290250014091fddfa1405f198877e661be0940d7de72d","first_seen":"2026-09-04T15:56:41.497381Z","last_seen":"2026-09-04T16:42:40.149942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpdd172ec5ea5f4d6f9f3bbd3f807edf92.jpg?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.882Z","timestamp":1788540117882,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpdd172ec5ea5f4d6f9f3bbd3f807edf92.jpg?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 487980\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6AFAD5B37377AE878\r\nAccept-Ranges: bytes\r\nETag: \"B036740FD46AE5DAFDF52D3CB7227F99\"\r\nLast-Modified: Sun, 08 Feb 2026 07:11:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5486281868840111023\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sDZ0D9Rq5dr99S08tyJ/mQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":487980,"size_decoded":488556,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 4800x3200, components 3","md5":"b036740fd46ae5dafdf52d3cb7227f99","sha1":"6f2abea45111b8bdaf5382fd61b5f858b9628f0a","sha256":"8b8f0ae43744ead100348f3124cdb443f8fd13ed14ead269a6c6d231b2c0ded6","sha512":"a637c78977ae45c5b81c10aaa78ed20f695fbd2325f593b0d0e2961f6624b394fd8002ef66b1bb74c35d3628c3cc6a08fa0d1be617bb4f68bab130acc9b2d4ea","ssdeep":"12288:4kcQIls+HPReBUTASih5fDlEzKKGcAFoE+tOpccIg7:47QCs+HPeRlnlERAFja3dO","tlshash":"ffa4233447f16b02da764735648f331cb7aab83b5e294277c4a61f732616bf0e89ca41","first_seen":"2026-04-27T17:19:29.791258Z","last_seen":"2026-09-04T16:42:40.151109Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1703,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":273,"receive":898,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-d7c6bf0b.css","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.931Z","timestamp":1788540115931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-d7c6bf0b.css HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-2dfe\"\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NOvg6NRm4So8igKyck1%2BH0lsSxwBS2%2BmMQZWBw2ZZpv0exd5vyu63EV7WDfOCCQGMI3svteTspHz0Lnq3uRvJdgwgYA6lAlSmNaCRcbSdSd%2By%2B7aSq8Jo2iSMbQecwfsRaxZqYc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e71cc9eab56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11774,"size_decoded":3409,"mime_type":"text/css","magic":"ASCII text, with very long lines (11773)","md5":"c32d8370dc40dcd1759156d0e2464b11","sha1":"667b1ddc4aa9689d6724487caec9a629c16474fa","sha256":"d7c6bf0b17f3f7f6fa94477b09469cb8126b128b5dec09794e8ae0b02eaf943c","sha512":"e762e996af27bef4963018ffdf66656820c46102fba09a8c4ea0dcd0e1098b2f3175ebbf30b55c2ad0b6a43e9d7cc3b0e865afafa32530213bb0febca6268476","ssdeep":"192:/bD5eDcXk9bEj+xHRQsEYvZOzXkG5ZULin5W:/bQGYbTC8xwW","tlshash":"b432832df69c2638ac3bd2617e944acce15afd20e6935d94e953a5320dcb6f31a30188","first_seen":"2026-09-04T15:56:41.442473Z","last_seen":"2026-09-04T16:42:40.151741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/platform/dev/favicon.ico?2.0.1784404147579","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:56.319Z","timestamp":1788540116319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1784404147579 HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0X9WsTVWNAKw%2FFPqKq13pSiHMMaaOOCd4UZ8GYJ4%2FSyAyUYBUABBYC9Dncap1OwM7Opy9NE3sW0M7Oe%2FB%2FchYDR%2Bt2Lzk2mcvHMpn2UDz9gjX1Q2SnjdMMoGiAJQr6Qt%2FjFtdAc%3D\"}]}\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nage: 2783\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6794485c-10be\"\r\ncf-ray: a35e71cf0f0256a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1750,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-09-04T16:45:13.683275Z","times_seen":135,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_eth.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.092Z","timestamp":1788540117092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_eth.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8592\r\ncf-ray: a35e71d3ffd8b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"720c85e9c535e6553a32389ce5c8c29f\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:18 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=CILEEPeMFZ_YjyuhS6EVsOJl5D6wSIxjf82ODwAisqg-1788540117.113982-1.0.1.1-DQnGkDLykVsEa1LndEfdu_4EHlvIjCWvfctLOhvOFkQsQS4sSuO200RVsdXE46Wk.FO4QzCUsv_SRnexEInoRE5hReXvKY_5JdquyJKdIE.mY10ah85k1pAGkQDUK5YP; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"CILEEPeMFZ_YjyuhS6EVsOJl5D6wSIxjf82ODwAisqg-1788540117.113982-1.0.1.1-DQnGkDLykVsEa1LndEfdu_4EHlvIjCWvfctLOhvOFkQsQS4sSuO200RVsdXE46Wk.FO4QzCUsv_SRnexEInoRE5hReXvKY_5JdquyJKdIE.mY10ah85k1pAGkQDUK5YP","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=CILEEPeMFZ_YjyuhS6EVsOJl5D6wSIxjf82ODwAisqg-1788540117.113982-1.0.1.1-DQnGkDLykVsEa1LndEfdu_4EHlvIjCWvfctLOhvOFkQsQS4sSuO200RVsdXE46Wk.FO4QzCUsv_SRnexEInoRE5hReXvKY_5JdquyJKdIE.mY10ah85k1pAGkQDUK5YP; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8592,"size_decoded":9474,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"720c85e9c535e6553a32389ce5c8c29f","sha1":"d89df3b6979132401c628711f825b7bc4590cc36","sha256":"b9646034a8dce0fe2f482365661937610ee4900b2e5041873b25ea8429c0bd36","sha512":"5f3587b41770a778f3592f29bd1b624ae91ed8ab8eab8cf9e966e6fe908bef2f2e4d3fd7dc02ee07061f402df04e3804b0eda3fc297a3a171ddef2950b75ea8a","ssdeep":"192:G89NAY5SmzbZ0KPw8PcCgrn4nn+KoXmktfbNUw6ts/eF3sFOY:L+mzRPJ0Cgen+H2IbNUts2FbY","tlshash":"1c02a01ad3f0a2865d6c4703114194ffdc1d604c54dadd0857fe2ae2b72e0bb9f66da0","first_seen":"2025-07-12T22:28:58.36598Z","last_seen":"2026-09-04T16:42:40.153413Z","times_seen":20,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":33,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_sol.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.099Z","timestamp":1788540117099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_sol.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\ncf-ray: a35e71d3ffd9b509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"5bc7eb3839fa419024d466729b76a863\"\r\nlast-modified: Tue, 03 Mar 2026 01:45:56 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=NW54NPdHzEPAuozoM973zAKgP22mG0v0IRN02YG1Iso-1788540117.1146755-1.0.1.1-19cpx1Nyl0_4UTark6nZnpgPvQziFmUfdgT7J4Wwf_kSpujwQ.QzKUP7Du4hN0nueY1G8kQ7EyVSigZC0Ijj2crBII_PfGdAbea20ULObc2b5bfi11ILtC7tieIuP_8o; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"NW54NPdHzEPAuozoM973zAKgP22mG0v0IRN02YG1Iso-1788540117.1146755-1.0.1.1-19cpx1Nyl0_4UTark6nZnpgPvQziFmUfdgT7J4Wwf_kSpujwQ.QzKUP7Du4hN0nueY1G8kQ7EyVSigZC0Ijj2crBII_PfGdAbea20ULObc2b5bfi11ILtC7tieIuP_8o","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=NW54NPdHzEPAuozoM973zAKgP22mG0v0IRN02YG1Iso-1788540117.1146755-1.0.1.1-19cpx1Nyl0_4UTark6nZnpgPvQziFmUfdgT7J4Wwf_kSpujwQ.QzKUP7Du4hN0nueY1G8kQ7EyVSigZC0Ijj2crBII_PfGdAbea20ULObc2b5bfi11ILtC7tieIuP_8o; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":6695,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5bc7eb3839fa419024d466729b76a863","sha1":"2c62b058343436b88c56a5c3bd3a7e751e20444d","sha256":"469b2921933e8d3581d9b9f629744f0ef3ae00737094bfde3bc79a0574580761","sha512":"385c083444cb0d6e78b5e46c0eeb54e11e4b47a83316d9a8518a3f30c93e2b87cdaa7e0ac3faba33d935ca8574edbb7fbe07b82324f7c48f62cad4703b2ae5d0","ssdeep":"96:jJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjPfHTie9b30Muw1F5LsXep:t89NAY5SmzbZ0KPwnWE07w1FGe","tlshash":"fdc18e18d2e5a4e335e8844767c5c21ad42d002c1206fd3252f9ed876a1bdfb9f2daf8","first_seen":"2025-06-04T17:05:58.571943Z","last_seen":"2026-09-04T16:42:40.154013Z","times_seen":44,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpe62397dd54774631b8cd82d46c0f348a.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.106Z","timestamp":1788540117106,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpe62397dd54774631b8cd82d46c0f348a.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 36595\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6794D103430BE6A04\r\nAccept-Ranges: bytes\r\nETag: \"5E99FCDE9E2BBDC443987086C921E478\"\r\nLast-Modified: Wed, 25 Dec 2024 08:32:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10759254022839375494\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Xpn83p4rvcRDmHCGySHkeA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":36595,"size_decoded":37171,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"5e99fcde9e2bbdc443987086c921e478","sha1":"3b6b14e49a99d79c7a2a54e5cb6b9c3807442777","sha256":"f756f2a7c317d8393c860cf844f3cea30f38dd9e2b1314accd70d23c78d966b6","sha512":"0cc730bac7494001ccf965095e250b7df02fc310bce5e984488f7f01251ee933d47240c8dd1c85f14af1e03e7360cfcdf54a1be7f1d97d89ea53e4d1077083a7","ssdeep":"768:4Gj1lDcBw5522wC7pl/Stamk9bn3VHpQCSP/sK6RO:4Gjb7o2wSMHk9bHSP/sKJ","tlshash":"93f2d0f7be5e0fe9e828b4341d9e9d2b3a7f92205ae451d48192ddbb8023374c0e7551","first_seen":"2026-04-27T17:19:29.929004Z","last_seen":"2026-09-04T16:42:40.15463Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1625,"timings":{"blocked":1329,"dns":0,"connect":0,"send":0,"wait":280,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpabaa9cda031a4f1a962b0e886f82299e.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.109Z","timestamp":1788540117109,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpabaa9cda031a4f1a962b0e886f82299e.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2155865\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6AB67323831656972\r\nAccept-Ranges: bytes\r\nETag: \"9A73F9177FBC9E05F803FB1EE202342E\"\r\nLast-Modified: Wed, 25 Dec 2024 08:25:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13665435547475444667\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mnP5F3+8ngX4A/se4gI0Lg==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2155865,"size_decoded":2156444,"mime_type":"image/png","magic":"PNG image data, 5008 x 5120, 8-bit/color RGBA, non-interlaced","md5":"1507749bb731ef664b3c59cce5e0f692","sha1":"0779e12181dce80ee5a7b2187c057a2cb3fb1397","sha256":"5ee21207c5ab3c376afcb01e183e797af3aee4e2016c2c602f5e45f8215987a2","sha512":"c4613791e148d88939c356f2910612bfba3fe8e92fbd8d26ac04323389bd1bb3288859d8b9f1474193a5cc3c4650d845448e8d5ffaf46d06758551cf1cc89352","ssdeep":"24576:pG2GPjkSJo0GaoxOY/M9MW7pPKlMxgygXa53EgOVRzkBBh:p4PjnJo/jVM9MWNKKxgygK53EgOv6h","tlshash":"3c252304d967c05dcccf603322da9b285391a36bc9a0277487bde21ed9e992c9ec573d","first_seen":"2026-04-27T17:19:29.876754Z","last_seen":"2026-09-04T16:42:40.15524Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":1575,"dns":0,"connect":0,"send":0,"wait":284,"receive":1450,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp444e0561d33c4470ace38beddfc2963e.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.117Z","timestamp":1788540117117,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp444e0561d33c4470ace38beddfc2963e.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 379974\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D76AFD3631327A10A5\r\nAccept-Ranges: bytes\r\nETag: \"B43DB6A3825301FF2B88B9954E2B8D4C\"\r\nLast-Modified: Tue, 24 Dec 2024 11:22:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13696585670652470285\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tD22o4JTAf8riLmVTiuNTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":379974,"size_decoded":380551,"mime_type":"image/png","magic":"PNG image data, 1300 x 1054, 8-bit/color RGBA, non-interlaced","md5":"b43db6a3825301ff2b88b9954e2b8d4c","sha1":"c49214abaeb26fc47dadb086339b26a93647031f","sha256":"45e7f5f890eb66a979fda821504671a1861c72659719620882f32adefb16195c","sha512":"6d7624d0821ba8c4a86589ffdeb6a47a5b8f4ce70e859852ce66e5372877968e1e007aea757373ca94750c7f136e772dadee46c464accf0130fe6f9d1d60f6a7","ssdeep":"6144:2gKorEBLlg2HSLVsa79zbcX11xfeBJb1pyz67iPAbmcYvF0Yw:2gK/BC/LSa79LBJ/lmobWiN","tlshash":"1284235992f1f4facf7f404678e42da8ddaa7483273974cb410f801077a7a68b60679e","first_seen":"2026-04-27T17:19:29.726943Z","last_seen":"2026-09-04T16:42:40.155872Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2713,"timings":{"blocked":1837,"dns":0,"connect":0,"send":0,"wait":278,"receive":598,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/index-ef65dd47.css","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.926Z","timestamp":1788540115926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/index-ef65dd47.css HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-d54\"\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELq9OIm%2F4pbGou4QZ6SD4TvIAP0aiJerWnDSWPfrtoIgcc4B2%2F5GMs0L6ozpmWGVFV6l%2F1SsIQ%2FcFxnjQMowdAOTjdoB%2BEZZNjsJA0QxHImX70coeR6cU38eBESKmofKBJTdTv0%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e71cc8ea756a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3412,"size_decoded":1765,"mime_type":"text/css","magic":"ASCII text, with very long lines (3411)","md5":"7fd79e5e12f621e5803a47d2230e01b1","sha1":"449f8edbff6c22d0c16044beffaa53eac6a522a9","sha256":"ef65dd47649980a3f297f85d3a18d8f4d872971fed761aceb721922241367db9","sha512":"440ec0cab51c5e3527e2afac1c72f605157e5cbb164f6ccd15a4b85eb8b979e87aa56a125ee451d2ba5c22f812504aba299386897d2b0fb89cf380cc0a78c87f","ssdeep":"","tlshash":"9061020ef39d22359d37d5cb5d5c5bcc80102fa2f40aadf6e847972a19cfad326a1119","first_seen":"2026-06-22T17:10:55.691063Z","last_seen":"2026-09-04T16:42:40.156469Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2e89c9090ae24afd9cf235799d931b5e.jpg?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.082Z","timestamp":1788540117082,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2e89c9090ae24afd9cf235799d931b5e.jpg?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 966\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D6AB67323831746872\r\nAccept-Ranges: bytes\r\nETag: \"BD2A502125E5AB16052A31331D72FE70\"\r\nLast-Modified: Tue, 24 Dec 2024 08:20:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17964365870391095443\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vSpQISXlqxYFKjEzHXL+cA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":966,"size_decoded":1540,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bd2a502125e5ab16052a31331d72fe70","sha1":"c0425dc36c1c94d5281447ef35686fdae30f0b2f","sha256":"9389b1f7bb8df29b106d1d731d6047f903ed63b08fe050ea1c3b00b41be37198","sha512":"70fd9aab39fda5d9870bb677c923cb4950f75280e9f8bbd25fe1fd5f67375eb12fda15e701b0f923cc9d0619a3931a3e8aa7f9f42fec4f24bbcf66654de52ead","ssdeep":"","tlshash":"49110c5580348f69d3de011007204557f5a0f61943be73cd8f4772d65ac8c7dc6147a0","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:42:40.157107Z","times_seen":108,"resource_available":false,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":11,"connect":264,"send":0,"wait":269,"receive":0,"ssl":799},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_xrp.webp?i=kds?2.0.1784404147579","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.186.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.100Z","timestamp":1788540117100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 07:57:39 GMT","end":"Tue, 27 Oct 2026 08:57:33 GMT"},"fingerprint":{"sha1":"8E:A8:3D:1E:D9:D1:3E:C0:21:E4:4E:1F:E0:76:84:C2:14:DF:07:37","sha256":"DA:C2:5E:A4:21:B1:BF:41:1C:89:84:22:5C:78:12:76:DF:2E:DF:80:3B:F3:7D:BF:52:0F:14:51:4B:8B:5E:A1"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_xrp.webp?i=kds?2.0.1784404147579 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6434\r\ncf-ray: a35e71d3ffdfb509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2784\r\ncache-control: public,max-age=86400\r\netag: \"cd81dc4944037aa5eaf98f2c66aec1ab\"\r\nlast-modified: Thu, 30 Apr 2026 09:35:34 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure\n__cf_bm=Ce41GhQpDNonoBiKPKd0zR8QI.fNCJ5bgNG50IpusdE-1788540117.11588-1.0.1.1-JzHHDHtqgyPp4T1.Z1B6ALRwvFDaftr23SRav1RwOIYaHJUCO5KNyu3rkmJDlJzQ7mBEBo61CXJiHvJjE5pajO9LeqY52C6iKnAwFY9vliYNmZtWgwoqNxOI_VKEV7SH; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"facade-lang","value":"en-us","quoted":false,"path":"/","domain":"kraken.com","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"facade-lang=en-us; Path=/; Domain=kraken.com; Max-Age=2592000; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"Ce41GhQpDNonoBiKPKd0zR8QI.fNCJ5bgNG50IpusdE-1788540117.11588-1.0.1.1-JzHHDHtqgyPp4T1.Z1B6ALRwvFDaftr23SRav1RwOIYaHJUCO5KNyu3rkmJDlJzQ7mBEBo61CXJiHvJjE5pajO9LeqY52C6iKnAwFY9vliYNmZtWgwoqNxOI_VKEV7SH","quoted":false,"path":"/","domain":"kraken.com","expires":"2026-09-04T17:11:57Z","raw_expires":"Fri, 04 Sep 2026 17:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Ce41GhQpDNonoBiKPKd0zR8QI.fNCJ5bgNG50IpusdE-1788540117.11588-1.0.1.1-JzHHDHtqgyPp4T1.Z1B6ALRwvFDaftr23SRav1RwOIYaHJUCO5KNyu3rkmJDlJzQ7mBEBo61CXJiHvJjE5pajO9LeqY52C6iKnAwFY9vliYNmZtWgwoqNxOI_VKEV7SH; HttpOnly; SameSite=None; Secure; Path=/; Domain=kraken.com; Expires=Fri, 04 Sep 2026 17:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6434,"size_decoded":7315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd81dc4944037aa5eaf98f2c66aec1ab","sha1":"3eb3ad5464782853a92d1a2ff82cdc84e64bf0f6","sha256":"922ecaf521352093f1bd036492e59949903a3114d9ae422ab20ea42ce4a07725","sha512":"71572cfe28330cd1ff4f8765938a50c73b48f56aa91c3de117909321832c430133d20ead014897aaae1b8ca5c09eb126d6cf6c7ad4af0d5c1846b9aa39c39b87","ssdeep":"192:QC6w/0fGrd0d4gXuzUUXJ+UShSlbJeOWHdZm9Ry82q:Qgeqd0WmuzLA3hyfyw","tlshash":"23d19ecacb8ee84948bfec4ec5a916fd01f84f41b40d1d6704dc889cf2576e1592da35","first_seen":"2026-05-07T20:34:44.802471Z","last_seen":"2026-09-04T16:42:40.157743Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/currencyItem-95fb3565.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.928Z","timestamp":1788540115928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/currencyItem-95fb3565.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-4b6\"\r\nexpires: Sat, 05 Sep 2026 03:55:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2785\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yri0eluntQsasRoFdlI5Li5SApIO2cykmIcUj6T4AcD0nPjcH7slge60gylwugbw0%2FbBkHdeBt0E0G2k%2BdWGUa85ygmZ%2FCHSuOeT1xWOK1qOQJNG9wEXIcbYje3fOxsyAu0GXO4%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e71cc8ea956a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":1410,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"a01b0dadb5e227bd98a704d34cb2a4e7","sha1":"b7f4f8645e270709768ec2e516c6c0a5b140a548","sha256":"d02dd4fc62a29c2d7d2a95ce31ec56da038bb3abaab0942895621549c8c528b1","sha512":"3075de2286755aa70edc60d90a0545124eb18c7b7b81d41e95e990823a217a8290daa6b280c830093d75f227f44c644be7065dde801e15a4f7626cfdf12f938e","ssdeep":"","tlshash":"1721f49a9902c7b1cbbe9062c17d4414170d7fda700185c1fbed048a3797afcd724a31","first_seen":"2026-09-04T15:56:41.491588Z","last_seen":"2026-09-04T16:42:40.158406Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getAllSetting","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.932Z","timestamp":1788540115932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRGCb9T78Q%2Bd1n2e2Q8EgIpLsxztL%2FRY22N0ovq2Lyvl0rIBP5l%2F%2FQ6jI8OdZk1DtiHKBtoFi82vnIkqqX%2BK2pRYV1BXD8JYj8r9cA9iUIkk6vNmrFir6LvyPWSCg5jU%2BTe0ePaqNER3rBKv\"}]}\r\ncf-ray: a35e71ccb85956c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp6bb0ba4558704830a70dd0e97111a516.jpg?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.070Z","timestamp":1788540117070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp6bb0ba4558704830a70dd0e97111a516.jpg?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D66AFD363132060FA5\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Tue, 24 Dec 2024 08:19:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":2174,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:42:40.159418Z","times_seen":163,"resource_available":false,"data":null}},"time_used":1361,"timings":{"blocked":-1,"dns":23,"connect":265,"send":0,"wait":268,"receive":0,"ssl":805},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp6f547431c0064dd0bf8bbc0fb4e069e9.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.109Z","timestamp":1788540117109,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp6f547431c0064dd0bf8bbc0fb4e069e9.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 212682\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D7BC6A5B3732FBE36A\r\nAccept-Ranges: bytes\r\nETag: \"5C50F9006B35205538A2AE762272AAFC\"\r\nLast-Modified: Tue, 24 Dec 2024 11:02:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11836568954764455172\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XFD5AGs1IFU4oq52InKq/A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":212682,"size_decoded":213259,"mime_type":"image/png","magic":"PNG image data, 1500 x 1500, 8-bit/color RGBA, non-interlaced","md5":"5c50f9006b35205538a2ae762272aafc","sha1":"cbe2b0ebf9cfc86d8a797153c4e7be08a9984a5c","sha256":"9dee77e684e7bb856bfd43acff23efe0eeb83999abf31e1c188167a39536fc25","sha512":"80212546d4ae3100512a73c89950e18627a733d38664f62a95b0ca7335293c5cff181e7d073dd0426e4ef4d93c5718d54ac8c28097bacdfdf53cec61c505852c","ssdeep":"3072:RJFobMlHsWiNJrtIND6bYit5LMAf9fqWQA+r+An4KnU36T7qQsR7dJNhHf:KAlHsV5ttY6BBqWBhKnO6T7qzP/","tlshash":"a624129910e7cb62ef5e4737b52e3f90680458063aa833380170ee49ce9bdea46746f1","first_seen":"2025-02-02T00:35:42.266504Z","last_seen":"2026-09-04T16:42:40.160125Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2663,"timings":{"blocked":2220,"dns":0,"connect":0,"send":0,"wait":281,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/common/getAllSetting","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.128Z","timestamp":1788540117128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSXE48nVN8X5%2FucdshTEEa%2FmtJf7Uflnc1ZOp%2FR%2F5A4Td4L6IUIDaQE6cZcd935tUoMnVok8t0nMcho2qU1WTQxn4JSPXOMHYvSU6QTXqlCjjMK5SMtVlbSJXfA8%2FHGzkaHYRBsDMJ7aSHyV\"}]}\r\ncf-ray: a35e71d408b456c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":956,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/filters-5f18d3d6.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.927Z","timestamp":1788540115927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/filters-5f18d3d6.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-d5e\"\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=av6zd%2Fr3fGzjiBEZNFsb9hzOzxpN6g2S2Vn%2FhYsGkYBpiK%2FN9al4pJMQzA6tTYsTz%2BNd8Veu%2FVtdgDc9ervdemvI24%2BWSoji4kAULip3VeW8dI4Ex%2FEYunnK3m8PXSTelKFOURo%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e71cc8ea856a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3422,"size_decoded":2080,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3399)","md5":"c3f354cb8307793bd1f845df5ebfd065","sha1":"1ce5481f56599236b30236ee6e044aff2f3dff46","sha256":"f219f5ac3042936a373d699450c113a5ba7cc1d27b6942e0f7d9b631bece1022","sha512":"3c801e80402ed91461d426aa02d68ae97f8dea5adf4c07b2491f8abe0c70c41b322ec7af934b949b9c009d8352a652b1c765d61bac4b5e9fee53fd35a0b2756e","ssdeep":"","tlshash":"756145edf8d3613356fe5de94028855172ceaf10785f0a4df54bd0055a23888e07fb64","first_seen":"2026-09-04T15:56:41.483198Z","last_seen":"2026-09-04T16:42:40.160696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/assets/currencyItem-60d85ee8.css","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.929Z","timestamp":1788540115929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /assets/currencyItem-60d85ee8.css HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 19 Jul 2026 07:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c8172-6d6\"\r\nexpires: Sat, 05 Sep 2026 03:55:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2784\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5YDAwSVdfwcsRJDtK8IkRSONenAAypfUOnqxBE%2FmshhPlU0ht0s9%2FIuljAXQaflK17KxF84F9DlZxmXX72kK0P6QtHCFIihHXBFP7qyOvJ8%2FX6V%2BkxNXDsEdMsblh1J2RbdkKM%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e71cc9eaa56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":1320,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"1089970c70c80c7202c76af80156cac9","sha1":"c85254b66ce1b056fec523057b79da4889c136d9","sha256":"60d85ee8da3a27266c72c465a77ff03384a9776be9ae03b980eb193309676fe9","sha512":"628494baa060e49ba3eaa5dcd330f03d54b6fdd995eb23795ad098b214db3e5c95861487d28dc8333a3c1c01c5200869432354ecf46c4a29cf78adfd6db7868e","ssdeep":"","tlshash":"c2314fe4d3160374d93ac8966ea4018cd0543b829057dac9f48ffe1b5fcb6d31b70969","first_seen":"2025-06-19T02:24:45.85215Z","last_seen":"2026-09-04T16:42:40.161673Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp5013a523035043bf9ec9faa4632ae18f.png?2.0.1784404147579","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.104Z","timestamp":1788540117104,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp5013a523035043bf9ec9faa4632ae18f.png?2.0.1784404147579 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 130245\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AF4D7794D1034300D6C04\r\nAccept-Ranges: bytes\r\nETag: \"0910563A71E1CB8093DE694F696FCC53\"\r\nLast-Modified: Tue, 24 Dec 2024 10:28:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2297596028010201949\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CRBWOnHhy4CT3mlPaW/MUw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":130245,"size_decoded":130821,"mime_type":"image/png","magic":"PNG image data, 780 x 729, 8-bit/color RGBA, non-interlaced","md5":"0910563a71e1cb8093de694f696fcc53","sha1":"97b52883db62298b583b1a0c96987e6a7800cfc0","sha256":"3178e3d5e6bb13b2c17c538837b6d2006f584567ca19f445610ab5f638ba3ed9","sha512":"e0c10aa806d9002d2d5dad51a95d9b1597751d57fa8a284e7c47dc020e2a583152b3aa343e1cd461935a48dcdcc5ec435979424f2c70143c3bda21e2f4062973","ssdeep":"3072:+O7zt+JNnOME2fRT3y8ee8bTVrKeGcFXWIn9n3fQFGnpPF:x3t+jnTZTT8XVbGoB9n3CUF","tlshash":"a6d312666a22addf203dfa3a4673ffe005969733c4058c62c068d9c7c0a575b6bfd924","first_seen":"2026-04-27T17:19:29.747897Z","last_seen":"2026-09-04T16:42:40.162386Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2487,"timings":{"blocked":1896,"dns":0,"connect":0,"send":0,"wait":280,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.btcua-exchange.org/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.btcua-exchange.org","domain":"btcua-exchange.org","tld":"org"},"ip":{"addr":"172.67.135.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:57.127Z","timestamp":1788540117127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 02:38:22 GMT","end":"Wed, 04 Nov 2026 03:38:08 GMT"},"fingerprint":{"sha1":"06:3D:36:DD:36:89:01:73:15:B6:03:9E:05:70:54:F2:72:3F:D1:01","sha256":"F7:87:13:D6:88:8C:74:68:4F:B5:DE:62:89:1F:07:AB:60:78:66:48:91:8C:9A:B5:5F:A7:E8:95:42:4F:A5:CE"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.btcua-exchange.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcua-exchange.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:57 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://btcua-exchange.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99mFhfFt%2Budh%2BTmzYFY%2BLPnGaf5hol8nj1hOYm6kSMpvvm1MvsrCr6AvR0mIP1ohdvR5jQez5n50X%2Bw1qbvZkCx2X%2FkSJPgtnG6JHzdIN6F4JniPdLinHTBihLMEM7%2Bh4WCfxNSMswuMnDEo\"}]}\r\ncf-ray: a35e71d408b356c5-OSL\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":958,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T22:58:34.529316Z","times_seen":18281796,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.btcua-exchange.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcua-exchange.com/charting_library/charting_library.min.js","fqdn":"btcua-exchange.com","domain":"btcua-exchange.com","tld":"com"},"ip":{"addr":"172.67.171.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcua-exchange.com/","date":"2026-09-04T16:41:55.453Z","timestamp":1788540115453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcua-exchange.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 17:48:12 GMT","end":"Sat, 21 Nov 2026 17:48:11 GMT"},"fingerprint":{"sha1":"58:C8:25:47:1F:F6:D6:C2:11:C5:5D:5F:40:48:9E:60:5C:39:A5:93","sha256":"C9:01:BE:28:36:33:11:CE:46:F4:CB:1F:44:AC:EA:8F:E5:A1:5C:8B:68:DC:45:4D:F0:40:37:5A:0A:8B:6C:41"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: btcua-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:41:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 02:11:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794485c-2a6b\"\r\nexpires: Sat, 05 Sep 2026 03:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2787\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUppWjXhcQbWWQCcnNvBPka2a2vkiJ4Ar0%2B9v3db8UN42X0FFgJxQrfgjl4H1TN6wQfhn7JaG2nmcCakcSfJiOylDc2Uw9CengmbgIJdf7fWePmNz5bxt9Nqgs3HbuqsSpx4oRU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e71c99e3956a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":4249,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:48:50.862494Z","times_seen":1463,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}