{"report_id":"bfdf263c-6ab8-4d0c-9033-cd2a191e2ddb","version":0,"status":"done","tags":[],"date":"2026-07-17T15:25:22Z","url":{"schema":"http","addr":"btcdomkd.com","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"title":"DEV_TITLE","dom":{"size":24129,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17664)","md5":"a3d07a20140b4736a4d23846a8223bf4","sha1":"86d6583207e0d5a05002f6d8f906e13954328d04","sha256":"339a744e008d84f37abc822e160308243cb9e73136b2b7ec104bf5f05b02a6b4","sha512":"7751e8881caed1d71629feef897ab4a7528e33a3161298b7be4a6ab8ef8d7c5ce8ddc29549da8c94c7d13184dcc88ba328737b7c9eb1d60dd18f4436667c5ccc","ssdeep":"384:hx9FZCxo2kr+hgrQSFgqFxNFgiFHqFv+FzGFeqFn3FFmvKLRdRKZyp/L8u5AA:z/Qxo2o79V5eyuP1FQtu5Z","tlshash":"42b2bd356a1044ab13abd5c1e5707e2e76d2f30fc40a8555babca18a2fc3cb2b765472","dom_hash":"domhash8c3e10161d1b31e725e4aa10fefafc11","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btcdomkd.com","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T15:25:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tset-84k.pages.dev","ip":{"addr":"172.66.45.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-06-27T12:17:26.975081Z","last_seen":"2026-04-06T13:11:11.293805Z","alert_count":0,"request_count":1,"received_data":3210,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"recharge-override.pages.dev","ip":{"addr":"172.66.44.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-29T18:41:47.03049Z","last_seen":"2026-06-29T18:41:47.03049Z","alert_count":0,"request_count":1,"received_data":3545,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"btcdomkd.com","ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-17T15:25:25.551273Z","last_seen":"2026-07-17T15:25:25.551273Z","alert_count":0,"request_count":29,"received_data":2616470,"sent_data":13184,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"newbasset.s3.ap-east-1.amazonaws.com","ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-09-13T02:13:10.97255Z","last_seen":"2026-06-29T15:12:15.949843Z","alert_count":0,"request_count":11,"received_data":225582,"sent_data":6089,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"webapi.shieldeex.top","ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":8,"received_data":3508,"sent_data":4399,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adminapi.shieldeex.top","ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":18,"received_data":76848,"sent_data":10346,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"83c3e2adf3a6b14111458849e2f1e4d5","sha1":"562013729ba02b66b570492fb0a0f2b61280ec93","sha256":"ae599c2b6f2d946ba47f1d3f8bde555c91f3be80698db0c4e265bbef72849628","sha512":"a7332aa69feaa155fb0fc097e71f9908dbcf2ec5391d734e50b88281b9fd98c6d3666d741b514bc46ee9f8a3472efc3cd15b487e4090492071818822435364f4","ssdeep":"","tlshash":"abc08cc8a0e32d001602741410af24e49025802774481b168c98ec983e220b09237ea8","size":142,"data":"","first_seen":"2025-03-06T21:41:52.808608Z","last_seen":"2026-07-17T15:28:43.649331Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"44f69433d2b1b7d8bfccc5a4c12e9e17","sha1":"54e8e11cf422a1aeb36fda469a30cd3b92ef9084","sha256":"b92b25607dbe702cbc83a63ae91294b5a7a61b9d08174260637e9c6aa07972b8","sha512":"df59cee28901b819c83fbbf0ab2f31dd7bfed6d8ff8684a8aaed72c949e13c861c431e76a12d62a442d111dd2db3fd4cb2d75e1c361ba42a896ac271ac4f2af8","ssdeep":"","tlshash":"15116bfe195a60296303804e976b7911642660a9401a185173ccab9dbb9ab6dd0cfb8d","size":1034,"data":"","first_seen":"2026-07-17T15:25:32.027709Z","last_seen":"2026-07-17T15:28:43.651702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-18T10:38:57.040371Z","times_seen":40157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-18T10:38:57.041179Z","times_seen":41811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-17T16:45:38.341872Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-07-17T16:02:47.978234Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"66f3832186e63f9e6dc840695647afd7","sha1":"c88b5b4a0ad23b5e63454693716ea7e6e9b37a4c","sha256":"11c1c2b458ec629dcc74c85cd672bb7708e34ffb7efbb68aeaeb6ac913255b71","sha512":"5424db2d753294f6a8a6c4034187ad5b9d12787552d9c5e70b8eac316ab99076b4c3710935cc347d80726007276d9b75887bd352641dae8529f2e95695256eb1","ssdeep":"","tlshash":"efc08cc4a0c36d001a06641010bf28e49034402674881b03ac94e8482e220b08233e98","size":139,"data":"","first_seen":"2024-07-02T13:45:50Z","last_seen":"2026-07-18T07:56:35.222959Z","times_seen":4529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"60d048e4c2a1eb5d800d7af368cc92ac","sha1":"7ee48e9063a598ebd38d8b0c7430bd748c810c56","sha256":"fc5dd52f9a7f2cd9ac63f3d4e537d6a04f9d97421d87aebf080b38d981c6fb80","sha512":"d3eebc743f8fa489e50ff88bb1c004951f637a926125d6b6698d3d37f899147e2cc425f4ca1b10efdc2e5a69db4ba67f5615281c07adec44f17dd4aaa85d72e2","ssdeep":"","tlshash":"e8c08cc9b1e33d001602641050bf24e490244426b04c1b82ddd4ec492e220b08233e98","size":145,"data":"","first_seen":"2025-09-27T05:00:10.591622Z","last_seen":"2026-07-17T15:28:43.661164Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"e21a880dd4e3258951787a42857bfaea","sha1":"d69092393af4e813929289ea3c5a180c722ed227","sha256":"b409d8c03eaa683dc7ddd1fdd40df4dccb80954fd3ee28ccd07d14415c28944e","sha512":"e340b50c449986a72c671e9f082b62ba21b40061c898e7d11b24a908efd7755559b88ced0fc5ce1002aeeb69f90b86eaf58edba7f1716ba5b7376a387ed22aee","ssdeep":"","tlshash":"45c08cc4b0d22d001602642060af24e49025442670481b028cd4d85c2e220b08233e98","size":139,"data":"","first_seen":"2025-01-03T15:55:01.306059Z","last_seen":"2026-07-17T15:28:43.661768Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"6ad1de43a179edb86c8a59616f0bbb3e","sha1":"297000177cf28dae0c4b519d0b4ed485a943e29d","sha256":"f79a609bba025ca87664a6e904e36ea1fb8725b9bfb307a9339aa46364617439","sha512":"c79345d3262380fe5036bba72fdf15c3299b0fb1c1b778d96b9ab9a903719cf77a1773cfbb9a8a8806be9a66ebf20add9f7dc5d1cfd8aaa48e81ba4716e9ab63","ssdeep":"","tlshash":"03c08cc4a0c26d101602651021bf24e49024402eb08c1b038ca4d8493e220b09233e98","size":139,"data":"","first_seen":"2024-08-20T17:29:46.839424Z","last_seen":"2026-07-17T15:28:43.665245Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"cb0024a141d820b14f417d71dff50639","sha1":"dbe8e483f72be637712343df2ceb3d5c72f3e178","sha256":"64142350d82d76d517d19b5c4470f76264c5717b3dd313da5fc5118b354cac74","sha512":"27802f8ab379567efd52186754ff5f08e5f3c5739ac9e443f14c3123b544300517aff97aebb3f4489c14d77d3e12ca8fd5ebc4b24a08c7617c251aeee6e1cc63","ssdeep":"","tlshash":"f1c08cc9f1d22d001a06655050af38e4a024802b744a1b428ca4d8482e220b08333ea8","size":145,"data":"","first_seen":"2025-07-13T15:45:44.61234Z","last_seen":"2026-07-17T15:28:43.667241Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/charting_library/charting_library.min.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-18T07:25:40.634263Z","times_seen":1218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-52a07a8e.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c64ef1b2648f96cb0cae604c076e1a","sha1":"58768108735c74b95624eae780e2216e1a008b45","sha256":"9b396d870a7dffe066dd9dddb6439209d0b5b43af769aacda64477747f7420c7","sha512":"4f56e89f2e7dcb3c872951c2b42514c36bcd030e15d53637d544accdec94f172ac1638419f0d467cdb6fc73f3ad387d3e40041696cd99ecf86f51d396d83c179","ssdeep":"384:+WdexIUk09x5JLAF2FO3lLfW+AkLEEWjt9iUSq0hmjJxPQMF5aRr5Czyf:bd29/jgpVLfWglqwOJxIMF5aRr5CGf","tlshash":"5c42e89ef502ea3cf6bba051849800107769bfeb104988e1f5fd5d8e6366eb8f355704","size":12780,"data":"","first_seen":"2026-07-17T15:25:31.970507Z","last_seen":"2026-07-17T15:28:43.616649Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f3de45722edb9a9e8c3e6bd127b92fe7","sha1":"ec7ec51db78d7c871ab7e064d5321665dab42ebf","sha256":"65b126ac4f07d022b90cb8cd4519fb643ee140ba17dbba7103311c8f25cda727","sha512":"11b335ca47beecf95284ea8095def5cf112dafc28ee84dc352b25186308828ea20f3e6876b5b5d379b258bfa25549431bf2259b5601677f32cc4647e5ac83cc0","ssdeep":"","tlshash":"67c08cc4b0c32e001603651110af35e49034c066f0481b028c94dc492e230f48233e98","size":145,"data":"","first_seen":"2025-09-27T05:00:10.581706Z","last_seen":"2026-07-17T15:28:43.662327Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"2f969fe61d71086d64241e008822c95b","sha1":"7c121891f6d174559530d20dd6f7d2b872a09114","sha256":"5ee69ad538ecfae124e4ce08280c36ea1327deb66961c2679763782dc5869a07","sha512":"5b772945a59f16e93d1f0a6b2c87661c1fbdf691fcabb4f1393a2cc3f4cce6bb2e64b821a3f273c05c70f5f10cdb7ee6e32c1dbdc69f934713ae48c132d4599b","ssdeep":"","tlshash":"4cc08cc9f0c62d001a03655110af34e89034802e70491b428ca4dc682e220b08233e98","size":145,"data":"","first_seen":"2026-03-09T14:06:56.278282Z","last_seen":"2026-07-17T15:28:43.636832Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"714231e8680b0901712126baa0ab762a","sha1":"e296b3fed658372af6910a3e5d318a4aeea1359a","sha256":"4adc91f500bbe01f880978b8c96db1afc98bb09c4f8929a265922c0b71b4d7c4","sha512":"1badd0c5ba89e8944cb4097f2ad3adfa84552a2408e72106ae19c649a2b9eb7148d76faae6f6d64c74865f3662a33bb6a1715ebbd6098a6f1a8c89f3349e6921","ssdeep":"","tlshash":"4bc08cc4b0c36e001602656060af68e8a024802ab0881b029c94eca83e220b08233e98","size":145,"data":"","first_seen":"2026-03-09T14:06:56.283897Z","last_seen":"2026-07-17T15:28:43.643265Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c2a59594b7c750c554d59b777cf7e0a5","sha1":"cc0ac4dbb49aff978ff3ee7d7c1a27f761ba6a20","sha256":"505695da350a211f6c8dbebc42f4bdc2bd8e287e4f5611c8eaf94c81f8951468","sha512":"8fdf9120a742f4fb36ebe9f4bd7684db839a87a5773a496dc5a6e6a8403cfe7562e67463995d588160f8fe75170f338034d8676b7708873d3c0b5c84a0da3b51","ssdeep":"","tlshash":"eec08cc8a0c22d041702641011af24e890244026704c5b02cca4d8683e220b48233e98","size":139,"data":"","first_seen":"2023-05-10T15:08:47Z","last_seen":"2026-07-18T07:56:35.169997Z","times_seen":6997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"2b72232ed380a528eeb3a552d77ae9c7","sha1":"6dc118004f8c5dcbcb571446e544948e5884cd56","sha256":"b7d4991a24ab4ba72ab4e3cfa67e51ed181d0f21335bd7adb062d024a1564c4a","sha512":"9a7cba48645dd78c7a719297ffad44b3da7263835e444e0fde947908fd4345a1cbb1d672b3e53338231cd6a11b38c7d45e5395f1387d368b0e8f93beea4d6347","ssdeep":"","tlshash":"77c08cc4a0c26d001602649010af34e890244027b0485b028c94d8482e220b08233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.519141Z","last_seen":"2026-07-17T16:02:47.964105Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-13cf1f47.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f158bb6b3e4007e644a08abe53b6925e","sha1":"7a60e72fc2b90d2a32ba4d37540e2187b5a69da7","sha256":"775a9006544296e1c3f19cf2b8cef6cb9d4b7faf83e693111ef8786bd668a4f5","sha512":"dc29bdaebc2652789854156b3a8df31e44b2e852e650535df7c530ddcf668c8d77209366037ba45d5641f874860d0c441db12d3eb24cd74091fc2bcbfa7bcf0c","ssdeep":"96:Dw6SU+vY/9Y6qD+wSP+HMyytb6aiH2brP3hv+e3X2aNa5ejA:5+vYFY6qiwSkytb33fhv1XnhA","tlshash":"79a1b789f802c67df9b75440089c142021ac7bfab20548f6f3bdac4a67b8e79d785766","size":4667,"data":"","first_seen":"2026-07-17T15:25:31.98581Z","last_seen":"2026-07-17T15:28:43.599878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/currencyItem-c9b45781.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c3b4f075db687e50e2bfd39d08ae271","sha1":"f18af6b5e3e0ddc4cde45b02e0cdf98c8eab4443","sha256":"5d1a4fe41a5fd6b2f7f32d67cdff8b17821e9d1ea8344923f32773f5c97e7bfb","sha512":"cda38e4abd784329c95f4cc57c1e2963b6ea82f6fe149e6a5527869aa67c55462cf4271cf25879ff6887231d731ae066eb3743ea733ea3e84efac97740547a95","ssdeep":"","tlshash":"f721df99ae01c7b1cbbe5062c5bd1414170d7bea700181c1ebed158a3b8b5fcd728a31","size":1206,"data":"","first_seen":"2026-07-17T15:25:31.990462Z","last_seen":"2026-07-17T15:28:43.608133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"fba0ee7ae4592ea85cd034e3a0880b6a","sha1":"bc8903ce273e24296e904ed4649b0dbe555bb80e","sha256":"ca9bec056a2ab66f969f3a8db147ceaeaa0e521ee58a111c301d23b7cac397c3","sha512":"7e91cf496f5110e2c7c77e795120b6847f8f63e39b1e8a0cc155c5bde26bf2c12340df517db0421bdb986ce605bae72d5ea8ebc97f3c63dad5025996084cd0a9","ssdeep":"","tlshash":"28c08cc4a0c63d001a02aa1410af24e89024802b704c1b439ca4d8493e224f18237e9c","size":145,"data":"","first_seen":"2025-09-27T05:00:10.573775Z","last_seen":"2026-07-17T15:28:43.6577Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"7746d006e46a239a1cc285b1258cb89b","sha1":"106cc8e7803882091dbf88ccfb0ff1749cf783c5","sha256":"f5547d547d5c875cb5cdc9a2fabc160dac1896c419ab4c26f17101e011e0a4ab","sha512":"dcc1e9e2e8ad494db1c897fbea2e441431f43f8ea90cafafb295acd21ff186ad268c54a652cd7ed665fb1ca5d132071cf052b0eccebab3844f3d97aa038e6525","ssdeep":"","tlshash":"0cc08cc4b0c22d006606b42150af64e49035402a75482b428e98e8483e260b09237ed8","size":146,"data":"","first_seen":"2025-09-27T05:00:10.572396Z","last_seen":"2026-07-17T15:28:43.650624Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/filters-7c5c4370.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"436d235acc7456374cba96fead71de25","sha1":"7053790d2e11594187927d024b529a267df8a084","sha256":"95cd848ac974de0f20b370e09c223c530874b7fe447528fc65e227937b8fddd6","sha512":"0e801561b677fcc3efe0ed7dbb4c2c8ae2cd0ae315a64b34beb7b9d0656ef49dc5e1b3a1125c3ea56b3ee5aaf435fadb01bb71f18138129ec4811c12d5f6ec29","ssdeep":"","tlshash":"685124edfdd7a13356ea6ef944288414728eae20686e0a4df54bd0455933888e07f778","size":3102,"data":"","first_seen":"2026-07-17T15:25:31.960917Z","last_seen":"2026-07-17T15:28:43.629988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ec4c1d5196aba60d94e140a373eff54b","sha1":"3dd138ec0af6761c2a33a2c83029bfa4f664dbc5","sha256":"ab39237c410b7884ae76d0bf39fe69f1291c24374f6ed095b135ac23fd21c96b","sha512":"5bb9e931ec252a36f73a85dd6e945708c1fef54fc720cdffb90765e78c51c81080ac95ef1e567bc5ae9863c243de0882e1183561e754d82e123890b96d47fa4a","ssdeep":"","tlshash":"93c08cc4b0c22e001602651010bf34e89024802674481b028ce8d8a82e260b48233e9c","size":142,"data":"","first_seen":"2026-02-01T01:35:54.682726Z","last_seen":"2026-07-17T15:28:43.654196Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"44bfd921e9543c2f43861ff2ed742d1d","sha1":"a6639d2c6815b027fe890f5e3829c4010591683c","sha256":"3ac1b7a6639f6e4bc683976b2127cfcdf8845314148579ac3aa8f989c146461a","sha512":"e9fc564c4d2700d6be82f054d1fc3d2d23d38e806e9f5eefc94b3ea49b8e6d1f2a637eca669953a8311dbdfa301aa63cefbf2c13bc6eec9dde9bf9442a8fe3d6","ssdeep":"","tlshash":"a9c08cc5b0c22d009a02641110af28f49024402670482b52dce4dc483e220b08237e98","size":142,"data":"","first_seen":"2025-03-06T21:41:52.819585Z","last_seen":"2026-07-17T15:28:43.666518Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tset-84k.pages.dev/vendor.bundle.js","fqdn":"tset-84k.pages.dev","domain":"tset-84k.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aa17fe8a5b2314db058ccb9cb477645","sha1":"b0902395a562ce922a291510e97583df22bdae85","sha256":"ca60f3dccafb7abe52b79801d9cef53637e38bf3e1cd164af0e014696a5b5984","sha512":"87700b2ea9ed1bff756cbbc35cc32abd389ed9727106f03f3a2a43b711a0a3947ad8ebbdc71d92623358dfc60d6982b265a14bd67b955112b2f7bc8b500d33c4","ssdeep":"","tlshash":"d44195a90654c27348e20feea0b7c2cc7f523449b547e9699e0c0c5e5487ea34ea1dac","size":2438,"data":"","first_seen":"2026-07-17T15:25:32.013243Z","last_seen":"2026-07-17T15:28:43.612139Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/vendor-cdb74f29.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6345e3d8458fadedf8b878bfbf63cfda","sha1":"a33d5a56cc1d51acf04a2f67a1a3ee8e83e09fce","sha256":"85225714a39f2a0dbfaaa10116ed7c76fc331487ec5ba33c09140332f4f5b83e","sha512":"43e1eb582e16c9feb5ffd7e3505a72a153ca79c57acaac2cb601052ae52a5b05403b392b37c181e31b2b3249fe8c97a22bb892ca8b89a26a32719d50f58691f1","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukK4a2V9:Mv65Eg1VUh7a+J/LGD8ownWkOusa2/","tlshash":"151529c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","size":879067,"data":"","first_seen":"2024-07-24T17:37:42Z","last_seen":"2026-07-17T15:32:37.201846Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"a6c5d65e551430b1950331879b14a51d","sha1":"34d6767dc2fd9f9f5b161f4af7d580a75850105a","sha256":"1837fcfd5443eedd4b56189cae3a113e0d9701ff0c043d5fb1c1692262674880","sha512":"2b1477e3636c1c537ad7b2f376c9834ac9b30f810529053220f39695e05465cac05bbbbd0cd1886917ad9ea8ed1b28fd5ba75304c18168e05a15b32c2fc465e4","ssdeep":"","tlshash":"66c08cc8a0c22d001602641020af24e49024402670482b03cca4d8d82e220b08233e98","size":139,"data":"","first_seen":"2025-01-03T15:55:01.034291Z","last_seen":"2026-07-17T15:28:43.642047Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"6bfc68ca673adf29592b7f1080026574","sha1":"ea31642ffe2af1436592801a8899f159ccd82a3b","sha256":"90a28f86c845a175ad683b18ffe710f17fd7d92bdbcc4fa194446639d200cc69","sha512":"146399870300bb6b8d0aeb1a95741d9b1af123290b182c325d40837fd50efb35a9916ad72294989e0ef4ab1537e6a9bb79e033c0349f641ce5f82baeb22611c6","ssdeep":"","tlshash":"2fc080cca5f37d0516167561146f35d4d0289017704c5b02ddd4dc483f531f48237d98","size":172,"data":"","first_seen":"2025-09-27T05:00:10.576574Z","last_seen":"2026-07-17T15:28:43.640301Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"a04b380d06b9ce499c1012ded51272a9","sha1":"662f119bafade00a0f12381158605d357a0318b4","sha256":"49c17516b62d933b5224cde8a219fbbaa445c2b6d5dbed4940e099bfe3c26eca","sha512":"014016ce8551fbcb68a9bac87a17b967a8d326fee7eccf4fadb8f458a0b40b945d99c2fdd1bc2f1e9d5c455702f9676efb3edc68f9030742b82e6dff4d5d31b7","ssdeep":"","tlshash":"04c08cc8b0c22d101a06691020af24e8a0258026b04a1b428ca8dc492e620f08237ea8","size":145,"data":"","first_seen":"2025-09-27T05:00:10.589985Z","last_seen":"2026-07-17T15:28:43.647346Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"9cbeee43eb9396cc6f22ceb11a068a8b","sha1":"855c2b8e594a001965664c3dac645d713e2c239d","sha256":"4748c61b3b46c6d4621d9fe0f60dd4899f2041684946b1434ba9656cfd8db04e","sha512":"13e27d58dd059ba27341cca34d9fd559187d1a26e28aed067fb26d0a35b3e4fb6d9f0a8f9ea8f4d3d207dfda8ae35c0ce573288498bc2c56472beade7926ee80","ssdeep":"","tlshash":"bbc02bc4b0c73d001606641050bf34e8a034402bb04c1b03ccd4dc483e230f08233edc","size":139,"data":"","first_seen":"2025-03-06T21:41:52.844247Z","last_seen":"2026-07-17T15:28:43.646117Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"9b98749731034aaba9fb845914d83532","sha1":"2e36c9a8179de4de6ef87327916fa75126c66ff7","sha256":"d1212f82305d25fa22c422f0adc2a765775b3d2f71e9d5b28315b01605100255","sha512":"8a9d7ba6917344b244a4ca43a609cd4902dc158f2553ced83a7b8f76c989986d7e8d57dd9b78eab5f43348a2186ecf4e6efd2fea435a27ffb8ae82024302566d","ssdeep":"","tlshash":"86c08cc4a0c23d202602652050bf24e490244427b04c1b829d94e8483e230b08233ed8","size":143,"data":"","first_seen":"2025-09-27T05:00:10.580569Z","last_seen":"2026-07-17T15:28:43.662912Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"9f73ae2f6a98b3a7c455fb46db3db35a","sha1":"a7797ef652b5ca85197143072639a89c92629e64","sha256":"b54f1adb588258baf4995088e9b9ba2b9256acc1b90f5dc4b114b35c59e55f85","sha512":"e65943e1f66069c83f92a1c6619dcbfb4f15e85b500c7b22779f94821934381d4afef99f6992704f8b65cd8b80ad92e6b1cba460fe050c2f9fada3b9fa2fe6b5","ssdeep":"","tlshash":"eec08cc4b0c22d001602a41010af24e49034502a78481b428dd4dc482e320b0d233e98","size":142,"data":"","first_seen":"2025-09-27T05:00:10.58257Z","last_seen":"2026-07-17T15:28:43.656989Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"b1e6506abda1ffa5b9ab2721a0fee13f","sha1":"cc64d89d747a4c6f5293b262055d3cb8e175b738","sha256":"848a05dd565ed4ad22c665530b61473e4437ca86f8bd027a8c952177f73b5269","sha512":"ac564a39d053f7c5f6e636296207458bae1d069f50356ee85ac23a8045617ebbe8cb5f26870d5a19f2d3cf834bc578918ad2b9f46bb68e3d0961c68841bb6e17","ssdeep":"","tlshash":"ecc08cc4a0c32d001643641050af34e490348026b0481b428c94d8492e230b08233e98","size":139,"data":"","first_seen":"2023-06-07T05:45:46Z","last_seen":"2026-07-17T16:02:47.973213Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-4cec2607.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1668bbba32949fd090a1ff40746a5b7c","sha1":"fb8b7863f68b9cf818ac63e46235094c183c21f1","sha256":"6e5d91221af994f746a493710e1b9d2d02e9db461eeef21a1d369841e837bef7","sha512":"f628179e073a90bbed94eb6824cb6d24b99ecfac3303d2a7a3548c5f20cb674e8e514df495d1be0380ccbac93c6ca0991a9fc08d9b050ab7c7be6fdfaf845dce","ssdeep":"1536:Iny2TTo3SPQbodZXnBHJsBeh/e64EhFHU:IytUBHJtVe","tlshash":"aba32b8da50b1fbf28fe0884a95b491031680fe75889ccd3b37aae5527fecd4625971c","size":100067,"data":"","first_seen":"2026-07-17T15:25:31.977429Z","last_seen":"2026-07-17T15:28:43.592565Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-9c561e3c.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"739fef739cf6f1390f554bf30dc5ee3a","sha1":"6ebff99ecb4f0213eb533d063d6eff7741a3acbe","sha256":"c0251212c609e5d13ec14c6792051e109d22da89cf173fdb13cf10af0e9bab4c","sha512":"667aa5cf41f989beeb6c787120bf74d891629e78fd2210b709e6f3d8c853f950b6fc9faaa855d5811bd9f5916d5974d66e33d4beb8b51cc7e5d407df10998ee3","ssdeep":"","tlshash":"88f0c06f7d6a80711bf344a8a1631420a5181b162754c5d4d4871f10c7788f7d12e614","size":510,"data":"","first_seen":"2026-07-17T15:25:31.99548Z","last_seen":"2026-07-17T15:28:43.598217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-8eeb8017.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"68a2b9ca1fc3e3c4d04e98ba679f2da8","sha1":"018e4b93d8eef6d9a25d4abd53a3f536a7468eb3","sha256":"7912f7e1c43a94daedd6f96126652c5bef355bf868c7c49830d4ac0486c33ac0","sha512":"7c9733ab2464651c73cded8df99ff25b272c4d07ef3ce3eae044a3343da84434163c77b8b56c5c8f3bfdd2ff59d550a80cdd8eb1da455903a4915857f558512f","ssdeep":"","tlshash":"3d01cef9fd1ccfba5ea3095811d02551101a4beefa2015e2885b7e251bf5890c78fb1c","size":828,"data":"","first_seen":"2026-07-17T15:25:32.006963Z","last_seen":"2026-07-17T15:28:43.613596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/zh-4f23eaa3.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"ca6eace6f73c8c77b5e089bc225619ea","sha1":"de2c80a45ddc5cdb8a8f83fec393704cef5b22f1","sha256":"e3a67e8d2d445e4028fafd90f622c7bd1cbd4ea217aed25fd658d6129e12fb03","sha512":"382196713472d35c6d05c69e67452f7e6367ee0222412c674c9bf29df0a62c079786de784e386caae363f45fcc17adb27556f27fa80c88b2d5aa191b18b9083e","ssdeep":"768:D9sgcXP80FU/fLS5LW06so/mgrUYxP7ePR:DzcXReetW06uR","tlshash":"b8f2f6d47daedd9a40a3a627b04f994120f35ec6c626c4091fe99ef562d8f039793b30","size":37173,"data":"","first_seen":"2026-06-29T18:43:27.546288Z","last_seen":"2026-07-17T15:28:43.618341Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"3c9e3899f0598205967f13659171831d","sha1":"aaa77e9ef705cfc86ec45490a0e4153e78072e1f","sha256":"e2ee16c68fdda2ed2ca2e1ca623d5bff31c647bad62507e16fc7911fd3dd9e97","sha512":"eba93c6786156f201b76d764706eb16f43464c05e713aa5c8c83d145dea5e8e9015531fa2d2621754c1f63d32ba665673c6d51ccfcdb6716ea968ba32187d078","ssdeep":"","tlshash":"47c08cc5a0d7be002622a41010af28e4a024802670481b12cca4d8883e660b08337ed8","size":145,"data":"","first_seen":"2025-09-27T05:00:10.584822Z","last_seen":"2026-07-17T15:28:43.663495Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/#/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f3d0d529b4c3fac2c94f47c5ceef7a8d","sha1":"f9d79348df9022eeba2b2bec0845ccc8e33670e6","sha256":"b1c9612234af8fd96a32d140852b4fccbf1726eaca209d960096e40c0f2eb8d8","sha512":"5ba91a3e356034e1f143a7af96d06a283acbe426cb3362de2878df074f2a627ba3b67be736aad45f15b516e0707b1cdf7518f10d374b4926b75e90ad739b5bea","ssdeep":"","tlshash":"bac08ccaa0c26d601a06651010af28e49024802770485b239cd4e8482e620b08233ed8","size":145,"data":"","first_seen":"2023-05-23T14:47:18Z","last_seen":"2026-07-18T07:18:51.150767Z","times_seen":7349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-50f5cc6a.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.499Z","timestamp":1784301893499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-50f5cc6a.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-4a3dc\"\r\nexpires: Sat, 18 Jul 2026 03:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304092,"size_decoded":66591,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"29108a339879c25ae3270cf6eaf318ca","sha1":"ecdbe8c9fe95397f32885e388c8fa3fdff626485","sha256":"50f5cc6a25f68f63220569cd58d313c6b21ca8aa0da62f6ae0f9be2298be583e","sha512":"b6396c3ec285205b7f1d7fb40863439cc86c46f5a283252208a827bf8c1d5dbb985557422c3db12c8357cc7f406b7c40d85a37fa2580fda1cb6492c9fe9af77f","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05TY:+B/54NZ8w71ZACkFDS3vyf58rBeV05TY","tlshash":"4454c6a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-07-17T15:25:31.952742Z","last_seen":"2026-07-17T15:28:43.596749Z","times_seen":2,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-bc011be9.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.774Z","timestamp":1784301894774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\netag: \"69f88c27-18d\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":879,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:25:05.118037Z","times_seen":1399,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/svg/dark/user.svg?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.199Z","timestamp":1784301896199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/svg/dark/user.svg?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Mon, 04 May 2026 12:07:33 GMT\r\netag: \"69f88c05-227\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-17T16:45:38.336467Z","times_seen":392,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/binance-coin.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.216Z","timestamp":1784301896216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/binance-coin.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9vnfKiKfYw/ypPS+pSDR5uJd6yYlK70XbmOtZQ9WqyKkMMVaHEpXUXvJK8tQWnD9q0FSLDG47R0=\r\nx-amz-request-id: CQX1B9E3CCF593Q8\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90\r\nx-amz-meta-s3b-last-modified: 20250326T121514Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12869,"size_decoded":13398,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-18T05:09:55.337293Z","times_seen":897,"resource_available":false,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":22,"connect":272,"send":0,"wait":297,"receive":242,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T15:24:51.707Z","timestamp":1784301891707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:52 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5574,"size_decoded":2282,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"3c3349f536a2cca3f312195a104cdd8a","sha1":"d9c7bbb16262032632da51ba5d9852cf1cf36352","sha256":"adf313e57be0a8497d3c6fe09c00f36d6e2ab934c10a07436a1cec03b1d4ce19","sha512":"1e91f270ba53ff3606d726fa7834dd9d389a306bd7b4bf24866c6464248db9b02da5b56145724b4d36cc0dbf132ad4c83884cb0999b5046fe16e8d143eb16aa2","ssdeep":"96:+r82EFdf53uSPExeQHJRFt/Zar6TCZydHRH/gG2mUsGKAiowGwuB1niHOiHZH/oW:+FEL9PE7HxmZCxfv2nfD3bwuB1niui5X","tlshash":"04b184b7ada0881a2371452beee7f01cef61115389198810b0dc90ee4fe1fd6c4dbb26","first_seen":"2026-07-17T15:25:31.958469Z","last_seen":"2026-07-17T15:28:43.591613Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1338,"timings":{"blocked":0,"dns":392,"connect":234,"send":0,"wait":241,"receive":0,"ssl":471},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/vendor-72ef657d.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.260Z","timestamp":1784301893260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-16997\"\r\nexpires: Sat, 18 Jul 2026 03:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92567,"size_decoded":38075,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:25:05.121387Z","times_seen":309,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":974,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/filters-7c5c4370.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.777Z","timestamp":1784301894777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/filters-7c5c4370.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-c1e\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":1607,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"436d235acc7456374cba96fead71de25","sha1":"7053790d2e11594187927d024b529a267df8a084","sha256":"95cd848ac974de0f20b370e09c223c530874b7fe447528fc65e227937b8fddd6","sha512":"0e801561b677fcc3efe0ed7dbb4c2c8ae2cd0ae315a64b34beb7b9d0656ef49dc5e1b3a1125c3ea56b3ee5aaf435fadb01bb71f18138129ec4811c12d5f6ec29","ssdeep":"","tlshash":"685124edfdd7a13356ea6ef944288414728eae20686e0a4df54bd0455933888e07f778","first_seen":"2026-07-17T15:25:31.960917Z","last_seen":"2026-07-17T15:28:43.629988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/platform/dev/favicon.ico?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:55.444Z","timestamp":1784301895444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\netag: \"69f88c04-10be\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4704,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-07-17T15:57:23.204955Z","times_seen":118,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/fonts/Arial.ttf","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.537Z","timestamp":1784301894537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btcdomkd.com/assets/index-50f5cc6a.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\netag: \"69f88c04-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047446,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-18T07:25:40.649488Z","times_seen":2098,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/platform/dev/config.js?1784301894742","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.748Z","timestamp":1784301894748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /platform/dev/config.js?1784301894742 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\netag: \"69f88c04-18a\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":890,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-18T05:40:53.769114Z","times_seen":469,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/common/getMt5Amount?coin=xag","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:55.841Z","timestamp":1784301895841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/common/getAllSetting","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.236Z","timestamp":1784301896236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/defi_20260503222014A014.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.249Z","timestamp":1784301896249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/defi_20260503222014A014.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 14:20:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7599e-c16\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3094,"size_decoded":3541,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"3e1cd0c2c669594e3d345c8959dff8ba","sha1":"ca6af553b3654da96f241cae3a8d52fb6e993af5","sha256":"7abb03584a6c25390d0c5b3c647c0ca5a0843e021917e1eec05a9fea6544a774","sha512":"955ff2888406f14d02be95f84eddea212685028677139d8f6a5186f2409898b623fe86559aa26fbf04c420a6fd237446b0862a74d151cbc04e5c3b4531d3c69d","ssdeep":"","tlshash":"68513cff1764a451dd5e023e0b18005839b7f5961225d24ba2c69e96eb8cf272376294","first_seen":"2026-07-17T15:25:31.966891Z","last_seen":"2026-07-17T15:28:43.635419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":53,"connect":235,"send":0,"wait":775,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/quoteA_20260503215637A004.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.265Z","timestamp":1784301896265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/quoteA_20260503215637A004.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 619\r\nlast-modified: Sun, 03 May 2026 13:56:37 GMT\r\netag: \"69f75415-26b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":619,"size_decoded":1032,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:59.009795Z","times_seen":173,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-52a07a8e.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.765Z","timestamp":1784301894765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-52a07a8e.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-31ec\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12780,"size_decoded":3981,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12779)","md5":"09c64ef1b2648f96cb0cae604c076e1a","sha1":"58768108735c74b95624eae780e2216e1a008b45","sha256":"9b396d870a7dffe066dd9dddb6439209d0b5b43af769aacda64477747f7420c7","sha512":"4f56e89f2e7dcb3c872951c2b42514c36bcd030e15d53637d544accdec94f172ac1638419f0d467cdb6fc73f3ad387d3e40041696cd99ecf86f51d396d83c179","ssdeep":"384:+WdexIUk09x5JLAF2FO3lLfW+AkLEEWjt9iUSq0hmjJxPQMF5aRr5Czyf:bd29/jgpVLfWglqwOJxIMF5aRr5CGf","tlshash":"5c42e89ef502ea3cf6bba051849800107769bfeb104988e1f5fd5d8e6366eb8f355704","first_seen":"2026-07-17T15:25:31.970507Z","last_seen":"2026-07-17T15:28:43.616649Z","times_seen":2,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/second_20260503221457A012.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.255Z","timestamp":1784301896255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/second_20260503221457A012.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 598\r\nlast-modified: Sun, 03 May 2026 14:14:57 GMT\r\netag: \"69f75861-256\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":598,"size_decoded":1011,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"cb1474a6586606366122e796e7c7b790","sha1":"65e5b65ac7af71f7c74943cbbb786c502da79f51","sha256":"59ffe909363cd4f08954e3d43522913d7f06837b0a726f4f094d07e4443970e7","sha512":"24e9f1f19d63ad08cae741f4a599ed906a4b047498dd9805dd8a5ef69eecb48ba4beaebeee27f86e61b054c5b894da1da38e1ba466ee616a4de71d851d798faa","ssdeep":"","tlshash":"57f041ea69d79ad8a36c0fb3564205908447d0d0f305d7536459f7fd272074016b9a36","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:59.065382Z","times_seen":142,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":8,"dns":30,"connect":234,"send":0,"wait":746,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/assetsA_20260503220948A008.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.269Z","timestamp":1784301896269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/assetsA_20260503220948A008.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 499\r\nlast-modified: Sun, 03 May 2026 14:09:48 GMT\r\netag: \"69f7572c-1f3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":499,"size_decoded":912,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:59.006504Z","times_seen":173,"resource_available":false,"data":null}},"time_used":1248,"timings":{"blocked":511,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-4cec2607.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.257Z","timestamp":1784301893257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-4cec2607.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-186e3\"\r\nexpires: Sat, 18 Jul 2026 03:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100067,"size_decoded":27706,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"1668bbba32949fd090a1ff40746a5b7c","sha1":"fb8b7863f68b9cf818ac63e46235094c183c21f1","sha256":"6e5d91221af994f746a493710e1b9d2d02e9db461eeef21a1d369841e837bef7","sha512":"f628179e073a90bbed94eb6824cb6d24b99ecfac3303d2a7a3548c5f20cb674e8e514df495d1be0380ccbac93c6ca0991a9fc08d9b050ab7c7be6fdfaf845dce","ssdeep":"1536:Iny2TTo3SPQbodZXnBHJsBeh/e64EhFHU:IytUBHJtVe","tlshash":"aba32b8da50b1fbf28fe0884a95b491031680fe75889ccd3b37aae5527fecd4625971c","first_seen":"2026-07-17T15:25:31.977429Z","last_seen":"2026-07-17T15:28:43.592565Z","times_seen":2,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-2f4644ae.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.776Z","timestamp":1784301894776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-2f4644ae.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-a01\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2561,"size_decoded":1250,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"45baacfdd2499066688f7ffc7225c372","sha1":"46551e76bfa93f50857a6b0f53d1f117d2adf0fe","sha256":"2f4644ae09e7b5a53ec8996547eb607ac21976285369b68da4ccc2c49fba346c","sha512":"edb7742f23bacfab32449c041654cb2e47b50fb18da2e9a33a7e736fbc02745db06ecb8b913c3c5b0f3defa871da7bc5e89bf3c9d7457be31f4595c0be470eda","ssdeep":"","tlshash":"c4511e4cfe9915345c7be98fbe5c6e488000be93e54aed85f007d70649cfae3276065a","first_seen":"2024-08-19T15:53:11.157245Z","last_seen":"2026-07-17T15:55:31.900119Z","times_seen":71,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-ebcbb882.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.781Z","timestamp":1784301894781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-ebcbb882.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-27be\"\r\nexpires: Sat, 18 Jul 2026 03:24:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10174,"size_decoded":2569,"mime_type":"text/css","magic":"ASCII text, with very long lines (10173)","md5":"8044a86f27d29ac1ceac4843b91faac4","sha1":"d07ff22b6be113ce3a00c9c8a207a3fe8d8b9229","sha256":"ebcbb8828082b86b46b48b0ff33abd446ad8066e2e074189e1bd1b33f558c50b","sha512":"ec1f240adad86617a6e3f4971fb1cfa1bb88f399339c098d7a0d4f3a039f5a8d76bb44c191f896bb206293168d88a7abc79492e8a56777f507af08d0cc14e921","ssdeep":"96:tYyGhezOETj8XMp5mXUVM2tL3Q0ML5gwuIy1lqzyWQWY62rpnt5Q4TF1DBGLejd+:tYhePfpYHBuBQSF1DBGLejdR8","tlshash":"dd22862df3e52a38ac3be255fbcc09cce11dba11e557dd98e51b6a2209cb1e3163045e","first_seen":"2026-07-17T15:25:31.980227Z","last_seen":"2026-07-17T15:28:43.617596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/fonts/DINOT-Medium.otf","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.183Z","timestamp":1784301896183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btcdomkd.com/assets/index-50f5cc6a.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\netag: \"69f88c04-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":73528,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-18T07:25:40.611987Z","times_seen":1666,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/platform/dev/logo.png?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.241Z","timestamp":1784301896241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /platform/dev/logo.png?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c04-ddb\"\r\nexpires: Sun, 16 Aug 2026 15:24:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3547,"size_decoded":3758,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1092c2aeba0e5e044377bfa78ca513fe","sha1":"b022c7398239ab650780fbbf4438737dfb50d2cc","sha256":"1ebac5525b4354e66ab5be889c2f7438a0e3e780f3863cca9910493e8c310dec","sha512":"6feadc9f48aaf4e62b2db2ef69f3c837d378365671473f8ff726d8b053ceb382273e6a8806c8a9e9d526ede16f537ae3cebf0060810744bba6f22b1b85cd7b47","ssdeep":"","tlshash":"0a7119ed0181f04eeddb6e535312a8855e1c32832a5a8e09dfa71d6d5f853a1c94420b","first_seen":"2024-08-19T16:31:39.806574Z","last_seen":"2026-07-17T15:50:58.948712Z","times_seen":17,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/vendor-cdb74f29.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.259Z","timestamp":1784301893259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/vendor-cdb74f29.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-d69db\"\r\nexpires: Sat, 18 Jul 2026 03:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":879067,"size_decoded":290983,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6345e3d8458fadedf8b878bfbf63cfda","sha1":"a33d5a56cc1d51acf04a2f67a1a3ee8e83e09fce","sha256":"85225714a39f2a0dbfaaa10116ed7c76fc331487ec5ba33c09140332f4f5b83e","sha512":"43e1eb582e16c9feb5ffd7e3505a72a153ca79c57acaac2cb601052ae52a5b05403b392b37c181e31b2b3249fe8c97a22bb892ca8b89a26a32719d50f58691f1","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukK4a2V9:Mv65Eg1VUh7a+J/LGD8ownWkOusa2/","tlshash":"151529c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","first_seen":"2024-07-24T17:37:42Z","last_seen":"2026-07-17T15:32:37.201846Z","times_seen":41,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-13cf1f47.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.771Z","timestamp":1784301894771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-13cf1f47.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-123b\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4667,"size_decoded":2580,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4660)","md5":"f158bb6b3e4007e644a08abe53b6925e","sha1":"7a60e72fc2b90d2a32ba4d37540e2187b5a69da7","sha256":"775a9006544296e1c3f19cf2b8cef6cb9d4b7faf83e693111ef8786bd668a4f5","sha512":"dc29bdaebc2652789854156b3a8df31e44b2e852e650535df7c530ddcf668c8d77209366037ba45d5641f874860d0c441db12d3eb24cd74091fc2bcbfa7bcf0c","ssdeep":"96:Dw6SU+vY/9Y6qD+wSP+HMyytb6aiH2brP3hv+e3X2aNa5ejA:5+vYFY6qiwSkytb33fhv1XnhA","tlshash":"79a1b789f802c67df9b75440089c142021ac7bfab20548f6f3bdac4a67b8e79d785766","first_seen":"2026-07-17T15:25:31.98581Z","last_seen":"2026-07-17T15:28:43.599878Z","times_seen":2,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.shieldeex.top/ws/83e385c6-96ae-4b24-bf82-88a8524a3d69","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.853Z","timestamp":1784301894853,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"GET /ws/83e385c6-96ae-4b24-bf82-88a8524a3d69 HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://btcdomkd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: QfLZIv0i6aH8QgcL5/zsIg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 15:24:56 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btcdomkd.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: No0JLfEELxMMfFkpp5IWZZYC2X8=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":2117,"timings":{"blocked":0,"dns":706,"connect":939,"send":0,"wait":235,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/common/getMt5Amount?coin=xau","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:55.839Z","timestamp":1784301895839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/plug_20260503221834A013.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.254Z","timestamp":1784301896254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/plug_20260503221834A013.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 966\r\nlast-modified: Sun, 03 May 2026 14:18:34 GMT\r\netag: \"69f7593a-3c6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":966,"size_decoded":1379,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bd2a502125e5ab16052a31331d72fe70","sha1":"c0425dc36c1c94d5281447ef35686fdae30f0b2f","sha256":"9389b1f7bb8df29b106d1d731d6047f903ed63b08fe050ea1c3b00b41be37198","sha512":"70fd9aab39fda5d9870bb677c923cb4950f75280e9f8bbd25fe1fd5f67375eb12fda15e701b0f923cc9d0619a3931a3e8aa7f9f42fec4f24bbcf66654de52ead","ssdeep":"","tlshash":"49110c5580348f69d3de011007204557f5a0f61943be73cd8f4772d65ac8c7dc6147a0","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:58.960734Z","times_seen":97,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/674B417AF6B948D5_20260503222855A020.jpg?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.723Z","timestamp":1784301896723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/674B417AF6B948D5_20260503222855A020.jpg?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 03 May 2026 14:28:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f75ba7-c668\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50792,"size_decoded":51169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 626x351, components 3","md5":"971c3cca985674d18d4ec033a108dcaa","sha1":"71e52e9d404fb0f7439b656220a3f04f6c0245e9","sha256":"720f92745ca0601f6f01afe59fead76cc6e6d3d74c973b70a3c847d9b244720a","sha512":"ea94f64b6af6fbd27c7d3b4ac582b80778839957635ade7f14167933329dbcffdcd93c7144f01626e1f95be50138048a6b22bae862c725677fffe64ce737eb5a","ssdeep":"768:wWm+MNSucVtgLeM9M1XoRmV3ncYbRh1InlcmydX7oansVaBphWjo633:w1NBcVE8wo339h14lc5oaIaTsF","tlshash":"2133028e3a4a9087ad7d4a30e1ee50bba1f47f2164000035d98895eda5fed2d2fd6673","first_seen":"2026-07-17T15:25:31.988967Z","last_seen":"2026-07-17T15:28:43.605976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/currencyItem-c9b45781.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.779Z","timestamp":1784301894779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/currencyItem-c9b45781.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-4b6\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":1099,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"6c3b4f075db687e50e2bfd39d08ae271","sha1":"f18af6b5e3e0ddc4cde45b02e0cdf98c8eab4443","sha256":"5d1a4fe41a5fd6b2f7f32d67cdff8b17821e9d1ea8344923f32773f5c97e7bfb","sha512":"cda38e4abd784329c95f4cc57c1e2963b6ea82f6fe149e6a5527869aa67c55462cf4271cf25879ff6887231d731ae066eb3743ea733ea3e84efac97740547a95","ssdeep":"","tlshash":"f721df99ae01c7b1cbbe5062c5bd1414170d7bea700181c1ebed158a3b8b5fcd728a31","first_seen":"2026-07-17T15:25:31.990462Z","last_seen":"2026-07-17T15:28:43.608133Z","times_seen":2,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/litecoin.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.215Z","timestamp":1784301896215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/litecoin.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ein7pmA32BlOJ4SeJqyh3m+AnnGIuCd6gqzCpUXeMoSqnMNch7tuhFXMFMqRTUlCDSBQGgDZDuU=\r\nx-amz-request-id: CQX3SPED1B7X6C7S\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"bb27c369a3aa54d9c1f8e59e1706da48\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee\r\nx-amz-meta-s3b-last-modified: 20250326T121512Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34858,"size_decoded":35387,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-17T16:45:38.289177Z","times_seen":858,"resource_available":false,"data":null}},"time_used":1442,"timings":{"blocked":-1,"dns":23,"connect":281,"send":0,"wait":314,"receive":271,"ssl":553},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/trade_20260503220829A005.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.268Z","timestamp":1784301896268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/trade_20260503220829A005.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 14:08:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f756dd-57b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1403,"size_decoded":1850,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"ff14c915c2c99172f549d0eadfb992ac","sha1":"0dc4ab2dcd8004e5ad33c172de675bfb4c2b5a77","sha256":"9486fd65287b622c809a36ca7aea7dbc7f3370e1698f30f1191f8df94883a490","sha512":"e03047400c3cfb8e93ba6ca4f31f0f41dd7b8928eeb80e46f72d5b97765bbc190b98212ac1ed7713d0ab5abe290ab5e21086218457f3ad62f5c07ca539e90a72","ssdeep":"","tlshash":"7a21c694f5026b6fd12b32b9ebf89c10aa41daec391d9a86100495b166a1f4b9c9c303","first_seen":"2026-07-17T15:25:31.99272Z","last_seen":"2026-07-17T15:28:43.615415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/assets_20260503220937A007.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.270Z","timestamp":1784301896270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/assets_20260503220937A007.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 525\r\nlast-modified: Sun, 03 May 2026 14:09:37 GMT\r\netag: \"69f75721-20d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":938,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:59.074659Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/charting_library/charting_library.min.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.256Z","timestamp":1784301893256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c04-2a6b\"\r\nexpires: Sat, 18 Jul 2026 03:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":3682,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-18T07:25:40.634263Z","times_seen":1218,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-9c561e3c.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.767Z","timestamp":1784301894767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-9c561e3c.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\netag: \"69f88c27-1fe\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":1006,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"739fef739cf6f1390f554bf30dc5ee3a","sha1":"6ebff99ecb4f0213eb533d063d6eff7741a3acbe","sha256":"c0251212c609e5d13ec14c6792051e109d22da89cf173fdb13cf10af0e9bab4c","sha512":"667aa5cf41f989beeb6c787120bf74d891629e78fd2210b709e6f3d8c853f950b6fc9faaa855d5811bd9f5916d5974d66e33d4beb8b51cc7e5d407df10998ee3","ssdeep":"","tlshash":"88f0c06f7d6a80711bf344a8a1631420a5181b162754c5d4d4871f10c7788f7d12e614","first_seen":"2026-07-17T15:25:31.99548Z","last_seen":"2026-07-17T15:28:43.598217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-d253bac1.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.769Z","timestamp":1784301894769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\netag: \"69f88c27-3d\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":541,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-17T16:45:38.313779Z","times_seen":393,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/currencyItem-15550dda.css","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.780Z","timestamp":1784301894780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-6d6\"\r\nexpires: Sat, 18 Jul 2026 03:24:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":991,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-07-17T16:02:47.929883Z","times_seen":403,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/da9bc5822529a2c225e057c0d8d50f36.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.218Z","timestamp":1784301896218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/da9bc5822529a2c225e057c0d8d50f36.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hX6TJxtlRgsTDUaWwA1TKeq7CVTN3OkPm9uXdgKxrIOiMBAKK6heTFsINhGYzFLUXgEW2Ob0ZqE=\r\nx-amz-request-id: EB2AGE3A05MD873G\r\nDate: Fri, 17 Jul 2026 15:24:59 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"da9bc5822529a2c225e057c0d8d50f36\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6\r\nx-amz-meta-s3b-last-modified: 20250326T121512Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 12446\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12446,"size_decoded":12975,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"da9bc5822529a2c225e057c0d8d50f36","sha1":"82b82dcdfcdb456c30cd1901d162f6eda4755768","sha256":"f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6","sha512":"c9c6ab97fd64a5d5901b3b97e3e2ff445588c37246abd20315c9f23496ba7040f6a14d0d95b5b0012cf7a30ac026ae818b16befef162330410d38810248b2ff3","ssdeep":"192:lF5DMISPEWXUxj4OcJTctXlli9mso8hM4CaD0ze/uCPuuzxd3iDPr:tMVEBxkO0TctXS9K4J/uCPB1ReD","tlshash":"93428df604472703f9bc1c97a3de061d18750f359251ee25d0ec1c5972a8aaf1bf606e","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:01:41.25611Z","times_seen":98,"resource_available":false,"data":null}},"time_used":2416,"timings":{"blocked":-1,"dns":20,"connect":266,"send":0,"wait":290,"receive":239,"ssl":1601},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/solana.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.219Z","timestamp":1784301896219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/solana.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ko8reLZOM6hDVuJFPfYHJ1nsP9zkkaOqNN6hbZrD/7+a+i2fnhEyUEcb8PAO6Ygc4HZaYUGB85k=\r\nx-amz-request-id: CQX3BDY8N8DRZGCW\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":25649,"size_decoded":26178,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-17T16:45:38.30801Z","times_seen":900,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":1106,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/swap_20260503221414A011.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.253Z","timestamp":1784301896253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/swap_20260503221414A011.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 376\r\nlast-modified: Sun, 03 May 2026 14:14:14 GMT\r\netag: \"69f75836-178\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":789,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bbad5d8588fa82242a90d749cdd4b43f","sha1":"aa2ec10316872a7a99bee54bd7a219f725f1738a","sha256":"2b10a6251723a1d78eebdbfc3ff8bbca7b0bf0ef3df87520025e12b595c9e292","sha512":"0e02dff3e327831196961905d0aaa054beb807bc1cacdababfd0c78e106ee95c1630c0d3890831e656e4cb45bbb01021dd4a70191e03992cdc63bb42834a6e85","ssdeep":"","tlshash":"32e060e7f2808cf2cac90037e3320320d08f80523380324b41301a914180fd783c134f","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-07-17T15:50:58.988989Z","times_seen":123,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/common/getAllSetting","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.755Z","timestamp":1784301894755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":96,"connect":234,"send":0,"wait":235,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/svg/dark/mengbanzu12.svg?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.205Z","timestamp":1784301896205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 774\r\nlast-modified: Mon, 04 May 2026 12:07:33 GMT\r\netag: \"69f88c05-306\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":774,"size_decoded":1191,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8fdb5cde40e8ebcb2b7fddbe19943e","sha1":"c1560502d0305ec2f9973a5857c7cdd9b56caee7","sha256":"3ab8082b5d02f0e40827f2520fe7d423877d2f8d78c6f41cc11fed84b276a0ee","sha512":"8791e15406186847e2527fae5de31e11f9820322947716a0b54d235607efaae19370d66d1864a78b5f65f84ddb778b46df2474860ae9176d828c6cf958d9aac1","ssdeep":"","tlshash":"4d01f17a5221c15da2434b80c6e93f4092bda29ba2d00448b3a32da54d74f7f55bc996","first_seen":"2025-06-01T04:11:58.700896Z","last_seen":"2026-07-17T15:59:01.091914Z","times_seen":286,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/ethereum.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.211Z","timestamp":1784301896211,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/ethereum.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3uKJFu6bTJ9UZiHqIcvGHxXR5xvCwK50l0KYAbypomMuJSo9fR5zMpTAaq8OBBztZj/GMCGwZX0=\r\nx-amz-request-id: CQXA3EGATTAQ2A6B\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"12d9722461759cefff02d9076a3d2718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9807,"size_decoded":10335,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-17T16:45:38.315935Z","times_seen":802,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":26,"connect":269,"send":0,"wait":291,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/tradeBB_20260503222540A019.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.258Z","timestamp":1784301896258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/tradeBB_20260503222540A019.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 899\r\nlast-modified: Sun, 03 May 2026 14:25:40 GMT\r\netag: \"69f75ae4-383\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":899,"size_decoded":1312,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"08e093865192b5a92aaabfbfae44c760","sha1":"d8270cec67953ad8ea7f44aeb74975a06590c5be","sha256":"22dd145d6c8b576fc62a0d452e79fee701ca49caa17e1e3395b107640b20d5a1","sha512":"0e0008f63114b6462f097f7a3d2601cda82cec3a1b42db17c224432b264ef60c2227eeaae1c28c561616fab48caf8629284dd89111e0027ec2813ccf36f17676","ssdeep":"","tlshash":"781163e3d3c4053c5f4b9e228252b923c2a02546446ef89dea77a92e094edca043cf62","first_seen":"2024-08-19T20:18:19.606217Z","last_seen":"2026-07-17T15:53:32.741055Z","times_seen":131,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/quote_20260503215623A003.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.266Z","timestamp":1784301896266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/quote_20260503215623A003.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 614\r\nlast-modified: Sun, 03 May 2026 13:56:23 GMT\r\netag: \"69f75407-266\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":614,"size_decoded":1027,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:59.005633Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/svg/dark/zu447.svg?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.209Z","timestamp":1784301896209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/svg/dark/zu447.svg?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Mon, 04 May 2026 12:07:33 GMT\r\netag: \"69f88c05-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":837,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-17T16:02:47.905424Z","times_seen":438,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/financial%20(1)_20260503222435A017.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.256Z","timestamp":1784301896256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/financial%20(1)_20260503222435A017.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1020\r\nlast-modified: Sun, 03 May 2026 14:24:35 GMT\r\netag: \"69f75aa3-3fc\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1020,"size_decoded":1434,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-07-17T15:46:40.838362Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":8,"dns":30,"connect":234,"send":0,"wait":746,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/homeA_20260503215404A002.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.259Z","timestamp":1784301896259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/homeA_20260503215404A002.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 13:54:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7537c-549\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1353,"size_decoded":1800,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3374d8dcc672161c3e942d71643dd6df","sha1":"1eb89d286896e972f6f9e433541e1a406d336db1","sha256":"26a7521cd56d484b5a9775d11c173e6f67c45c68c2bde5feee095b3ff5be0bdd","sha512":"02c86573b4cf743a1576007a70029a3808734d6893546fde74c13a3912a6ad2e850309c5eb0130492321eba8a73b7256f402ea483c861761934463a14eb6aaf9","ssdeep":"","tlshash":"c921084493f1682c99fe6034d1fa5a10dc9de10e392cc8a2ffb9a804722142adcb11b1","first_seen":"2024-08-19T20:18:19.617177Z","last_seen":"2026-07-17T15:46:40.826176Z","times_seen":149,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/svg/dark/mengbanzu13.svg?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.207Z","timestamp":1784301896207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu13.svg?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 May 2026 12:07:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c05-4a1\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1185,"size_decoded":1030,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ed9f9b6d12bd8c03bbd38cb6734207b","sha1":"ae379a9b431428b493abbd53c1a5d3db643bdf5d","sha256":"4459f6b2e766c434b3cf0746ee2939f7c05b588bf5ab4901f6d9427e602f4d91","sha512":"43b0c19361ca45562e501bc37a4ae4424f578dfe49b1fea83507052d085c72b01ec712aa7bcd9e5aefb743a9fd835f882afa8a7c335fc95bf6934ea8d5a3d9a7","ssdeep":"","tlshash":"172163b8c51152ca62814f88dbe82606623ef167f3f54d9cf39016b20e78d9f15bca21","first_seen":"2025-06-01T04:11:58.699477Z","last_seen":"2026-07-17T15:49:56.595259Z","times_seen":106,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/tron.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.223Z","timestamp":1784301896223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/tron.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SW/20hjIlWG1DPcTZmFOFO+fOaM72wYe+KP+0T7ykLRIsSXuPwMPKjxU14G0rF30EFXYTB7Ndmo=\r\nx-amz-request-id: CQX6JK8PA8FQPRE6\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"d5ca5f90c7a46cb88e5f57b2d3046ba8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28273,"size_decoded":28802,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-17T16:02:47.919084Z","times_seen":690,"resource_available":false,"data":null}},"time_used":1668,"timings":{"blocked":1107,"dns":0,"connect":0,"send":0,"wait":291,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.232Z","timestamp":1784301896232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/common/getCoinList","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.756Z","timestamp":1784301894756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":0,"dns":95,"connect":233,"send":0,"wait":235,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/index-8eeb8017.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:54.772Z","timestamp":1784301894772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/index-8eeb8017.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 828\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\netag: \"69f88c27-33c\"\r\nexpires: Sat, 18 Jul 2026 03:24:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":828,"size_decoded":1324,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (827)","md5":"68a2b9ca1fc3e3c4d04e98ba679f2da8","sha1":"018e4b93d8eef6d9a25d4abd53a3f536a7468eb3","sha256":"7912f7e1c43a94daedd6f96126652c5bef355bf868c7c49830d4ac0486c33ac0","sha512":"7c9733ab2464651c73cded8df99ff25b272c4d07ef3ce3eae044a3343da84434163c77b8b56c5c8f3bfdd2ff59d550a80cdd8eb1da455903a4915857f558512f","ssdeep":"","tlshash":"3d01cef9fd1ccfba5ea3095811d02551101a4beefa2015e2885b7e251bf5890c78fb1c","first_seen":"2026-07-17T15:25:32.006963Z","last_seen":"2026-07-17T15:28:43.613596Z","times_seen":2,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/assets/zh-4f23eaa3.js","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:55.848Z","timestamp":1784301895848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /assets/zh-4f23eaa3.js HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btcdomkd.com/assets/index-4cec2607.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 May 2026 12:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c27-92c5\"\r\nexpires: Sat, 18 Jul 2026 03:24:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37573,"size_decoded":14363,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27730)","md5":"ca6eace6f73c8c77b5e089bc225619ea","sha1":"de2c80a45ddc5cdb8a8f83fec393704cef5b22f1","sha256":"e3a67e8d2d445e4028fafd90f622c7bd1cbd4ea217aed25fd658d6129e12fb03","sha512":"382196713472d35c6d05c69e67452f7e6367ee0222412c674c9bf29df0a62c079786de784e386caae363f45fcc17adb27556f27fa80c88b2d5aa191b18b9083e","ssdeep":"768:D9sgcXP80FU/fLS5LW06so/mgrUYxP7ePR:DzcXReetW06uR","tlshash":"b8f2f6d47daedd9a40a3a627b04f994120f35ec6c626c4091fe99ef562d8f039793b30","first_seen":"2026-06-29T18:43:27.546288Z","last_seen":"2026-07-17T15:28:43.618341Z","times_seen":3,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/resource/svg/dark/zu29.svg?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.208Z","timestamp":1784301896208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /resource/svg/dark/zu29.svg?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 837\r\nlast-modified: Mon, 04 May 2026 12:07:33 GMT\r\netag: \"69f88c05-345\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":837,"size_decoded":1254,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"357e9e22a01768dc0a074a8cd1556131","sha1":"2d45da133bcf125352b92ac22ce445819d6de392","sha256":"16f5917f9b8a87e02921ef6461afe3b3b1d1d529715cbf184ec1de62f0d2259f","sha512":"777463938489448aa26f2721b2e395769f0915cec5f794ffde8414555a24101646a28535f9021a5595fe027a814eae081d8c33fd6f1f851f0d74fc49118c2048","ssdeep":"","tlshash":"d60112be4736a3fdd5544a80aad42699343de042e16404ecb3817e17be2062a0abcd91","first_seen":"2025-06-01T04:11:58.667223Z","last_seen":"2026-07-17T15:49:56.60546Z","times_seen":103,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/lever.jpeg?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.224Z","timestamp":1784301896224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/lever.jpeg?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5WKgz2Q7W3sZeQTOQuGGOHRrMLRvG7Qwxc0hI+wGWX16g3qu1nAeFc216XR/dFPughux4v/tWNQ=\r\nx-amz-request-id: CQXBSZEYW212BBJC\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"c58f4c5b071e5912836e45c01afa9e03\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 5326\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5326,"size_decoded":5855,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-07-17T15:57:22.439859Z","times_seen":284,"resource_available":false,"data":null}},"time_used":1692,"timings":{"blocked":1397,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/trade_active_20260503220848A006.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.267Z","timestamp":1784301896267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/trade_active_20260503220848A006.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 14:08:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f756f0-58e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1422,"size_decoded":1869,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"4a913208c52da44227f242793c66b5d5","sha1":"b8f6ad2637ef10524da4b7aab06cf41123cb490e","sha256":"f247f61f6f571fdb7d33bfd92f795997202fc8b711bf9e559e8cc269f187167f","sha512":"b697ea1d7a7a01bb48548e9463b747e9f635f6c3095e10e61be403cfa59162f1a2c359bba8aaed8dbdebd80bf68364ac635cb1eb45b2c86800abc3c394134efc","ssdeep":"","tlshash":"2921e987f40e8d2ef3bf112454dc95803af79a186403231f24015e2f66424c48750651","first_seen":"2026-07-17T15:25:32.011855Z","last_seen":"2026-07-17T15:28:43.594516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tset-84k.pages.dev/vendor.bundle.js","fqdn":"tset-84k.pages.dev","domain":"tset-84k.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.501Z","timestamp":1784301893501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tset-84k.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 06:20:43 GMT","end":"Sat, 19 Sep 2026 07:18:30 GMT"},"fingerprint":{"sha1":"30:A9:FB:BA:4E:B9:C0:71:5E:FD:F9:5E:B4:7A:27:DC:7F:3F:7B:BF","sha256":"E4:78:DF:96:17:54:86:28:A0:A1:F8:1E:96:25:B4:4E:36:AE:61:05:7B:D8:E3:71:EE:6B:AE:68:AD:49:43:BC"}}},"request":{"raw":"GET /vendor.bundle.js HTTP/1.1\r\nHost: tset-84k.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFHFQkdEVE7kVYAK7RJaDGFGt6uWQ4455NoxyK1CUsogHcHtpZpqEYZFM8hBTbKM%2BcA26Q4k0xrTKOQyFBz02eZVnYh006DNGR41vcM6Zx72IlVJzJ2Hz4p8Nve4T%2FvzZtZp3Vg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f836a249a495dc4dddf3fe04e80e0f0f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1ca41928aaab50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2438,"size_decoded":1839,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2437)","md5":"8aa17fe8a5b2314db058ccb9cb477645","sha1":"b0902395a562ce922a291510e97583df22bdae85","sha256":"ca60f3dccafb7abe52b79801d9cef53637e38bf3e1cd164af0e014696a5b5984","sha512":"87700b2ea9ed1bff756cbbc35cc32abd389ed9727106f03f3a2a43b711a0a3947ad8ebbdc71d92623358dfc60d6982b265a14bd67b955112b2f7bc8b500d33c4","ssdeep":"","tlshash":"d44195a90654c27348e20feea0b7c2cc7f523449b547e9699e0c0c5e5487ea34ea1dac","first_seen":"2026-07-17T15:25:32.013243Z","last_seen":"2026-07-17T15:28:43.612139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":7,"connect":14,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:53.503Z","timestamp":1784301893503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recharge-override.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 01:42:28 GMT","end":"Thu, 17 Sep 2026 02:41:11 GMT"},"fingerprint":{"sha1":"84:88:07:34:98:BF:D8:7B:55:46:4B:76:A9:CF:51:DF:A9:D8:2D:EE","sha256":"74:CC:46:3D:7F:95:24:44:B2:52:CF:BE:C9:D1:49:43:AE:B2:56:0E:04:7F:EF:31:F0:A5:06:DC:C2:E2:04:84"}}},"request":{"raw":"GET /vendor.Z6835.js HTTP/1.1\r\nHost: recharge-override.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 15:24:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1P0vIEbI79kTI%2FfKRIGilZ4ThAbOTElo7GyzcmZFTqLuewRFwELtJz5pWpToSaQBzMaRyl5pZIjJ758YC42BqdmOb1nPDJlC4SH2r1gLVRWgpWYd7yriUKWJkZCSK9Fhl0YD%2BHYFxm8sMfIYWF8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c792a8d3d1a1a37b202f921a9d896c2d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1ca41928dc0569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2761,"size_decoded":1972,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2760)","md5":"2a28b0a80e5d6aac8c7c343fd2025ffe","sha1":"47d99a9a5a0a86d10cffea91b6218d299f98571d","sha256":"e237183641e7ab0959923ad0b1405fad86bdd15705b31b654adebd8dcd96eedb","sha512":"06b29342733075eb366e0883c26a13720dfd932b39ea8056ed0e16fc42bda76352082f64c622e3445608e4fd91b7db69385ea0ac63c0fcb39c92ebd93a3060fd","ssdeep":"","tlshash":"da51a7a94a54c27749d20feea0b3c3cc7e623449b507e86a5b0c0c1d5547fa74ea6ddc","first_seen":"2026-07-17T15:25:32.014748Z","last_seen":"2026-07-17T15:39:05.154143Z","times_seen":4,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/ripple.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.213Z","timestamp":1784301896213,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/ripple.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DW9rP2lfVWB4UN0dvFXRwogiuhx4yEuJsf2TJEjykFsU2Ls3s4ybEgT7/Q6eovr+SCa9i0uUJW4=\r\nx-amz-request-id: CQX9S1D81W3QJ9H6\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":2802,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:45:38.338182Z","times_seen":854,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":24,"connect":270,"send":0,"wait":293,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/pledge_20260503221134A009.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.250Z","timestamp":1784301896250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/pledge_20260503221134A009.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 14:11:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f75796-5b6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1462,"size_decoded":1909,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"5012ff0aaecfefc6be7ea50f4dfd3db6","sha1":"fbf37df3a28cd4a9df92064194b8f62c3be26a19","sha256":"da66b7770bcf47b539d5ed6a8f15d12933ff8759f8084b5cf1fde3937a8dc1e8","sha512":"61138ce362d2c1619088d527f814d7cc0fe5bc3166ad0a7be95b4d2eca4a1110337d83526ecda68219683a5f8d8692514cbc4702400751c4d9c33a0450d1fafb","ssdeep":"","tlshash":"e931c7472c20ff18cfc0576406567951642a6ec852bfb24655bf87ea54a6ae29048a41","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:59.004251Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":52,"connect":235,"send":0,"wait":755,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcdomkd.com/platform/dev/logo_144.png?2.0.1777896487329","fqdn":"btcdomkd.com","domain":"btcdomkd.com","tld":"com"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:55.442Z","timestamp":1784301895442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcdomkd.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:18:44 GMT","end":"Tue, 13 Oct 2026 07:18:43 GMT"},"fingerprint":{"sha1":"8C:93:3A:48:C3:66:49:E4:5B:68:12:52:FC:2D:B6:22:9A:C4:D6:57","sha256":"D4:BF:60:9F:2F:49:14:B2:1D:4E:32:30:93:C4:60:37:10:03:11:69:6A:3C:FC:69:94:5C:3E:2A:75:1F:39:19"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1777896487329 HTTP/1.1\r\nHost: btcdomkd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 May 2026 12:07:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f88c04-b5c\"\r\nexpires: Sun, 16 Aug 2026 15:24:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2908,"size_decoded":3427,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-07-17T15:50:58.925926Z","times_seen":294,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/coinInfo.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.220Z","timestamp":1784301896220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/coinInfo.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UA9Tqsw+qASL6bbh9cvlzH+uJfA/H1VplgwdLqnGi36LqgI53tbt7RrbkueBQyctUqj9DhxpmK0=\r\nx-amz-request-id: CQXF881YAT6DKVBN\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"48384a67185dbdfeef3aa43c99d3319c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":55728,"size_decoded":56257,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-17T16:45:38.309481Z","times_seen":885,"resource_available":false,"data":null}},"time_used":2198,"timings":{"blocked":1106,"dns":0,"connect":0,"send":0,"wait":296,"receive":796,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/tradeU_20260503222200A015.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.257Z","timestamp":1784301896257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/tradeU_20260503222200A015.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 14:22:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f75a08-63f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1599,"size_decoded":2046,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:46:40.846451Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":10,"dns":28,"connect":234,"send":0,"wait":746,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/home_20260503215351A001.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.263Z","timestamp":1784301896263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/home_20260503215351A001.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 13:53:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7536f-529\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1321,"size_decoded":1768,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-07-17T15:46:40.835842Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/bitcoin.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.210Z","timestamp":1784301896210,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/bitcoin.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: lg5o0HwLcj1oXKj7fLPj+GN1T5DzJTgmt8yPi44lXAjtJQ9DB4hT6nQeChcCVednO7dfGovrZbA=\r\nx-amz-request-id: CQX8JS09V7XN2PY5\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Wed, 04 Jun 2025 15:00:51 GMT\r\nETag: \"6448b43b2e34f680e554905373a6c171\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: fb62fb35c40f699246e933b5d044a1e06a5bb087383ad2fa4c74c66eb958300d\r\nx-amz-meta-s3b-last-modified: 20240910T155446Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 6703\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6703,"size_decoded":7231,"mime_type":"image/png","magic":"PNG image data, 168 x 138, 8-bit/color RGBA, non-interlaced","md5":"6448b43b2e34f680e554905373a6c171","sha1":"e2ae7d64277a91a8a8b621090200a6d228edbb90","sha256":"fb62fb35c40f699246e933b5d044a1e06a5bb087383ad2fa4c74c66eb958300d","sha512":"76048ef297ebb44a97d68904c3e34c475cb016cf256bf88b703de4fb3cbe156668462ca20189b65ae77f88495d413bbc0aec073fa2261bd131a7164fb973df2d","ssdeep":"192:ivNELyFRfI7QO9sOz4hEZQ851wXIX5kWD:ivNs2WT9sOMEHwXInD","tlshash":"6ad1bf80062419cca8eb04624b7f1b9bfbf9d4390a4cadd3364d89e457d6f76ce202e1","first_seen":"2026-06-09T18:59:45.511477Z","last_seen":"2026-07-17T16:01:41.253883Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":28,"connect":265,"send":0,"wait":289,"receive":1,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.shieldeex.top/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.235Z","timestamp":1784301896235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:22 GMT","end":"Sat, 10 Oct 2026 07:18:21 GMT"},"fingerprint":{"sha1":"F3:27:14:5F:9F:FB:8C:F4:EB:1A:95:6D:F0:93:37:AE:BD:33:51:DD","sha256":"B9:A2:2A:6D:B4:BC:F3:0A:FE:2C:6E:DE:C0:D6:78:5A:3F:9C:84:B1:1F:92:E9:74:A2:8A:9B:75:BB:1A:9B:09"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btcdomkd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,satoken,language,lang,token\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T10:43:21.080893Z","times_seen":17335860,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"webapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.shieldeex.top/profile/upload/2026/05/03/loan_20260503221238A010.png?2.0.1777896487329","fqdn":"adminapi.shieldeex.top","domain":"shieldeex.top","tld":"top"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.252Z","timestamp":1784301896252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.shieldeex.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 07:18:13 GMT","end":"Sat, 10 Oct 2026 07:18:12 GMT"},"fingerprint":{"sha1":"AF:C0:93:B8:55:B5:A1:DC:5C:6B:B0:6B:27:89:D1:67:0E:90:51:9D","sha256":"27:90:40:71:14:56:E3:EB:A7:B2:D2:11:96:D7:07:B3:2F:10:6E:BB:DD:20:1C:2B:24:B7:41:EB:8A:07:DE:0E"}}},"request":{"raw":"GET /profile/upload/2026/05/03/loan_20260503221238A010.png?2.0.1777896487329 HTTP/1.1\r\nHost: adminapi.shieldeex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:24:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 801\r\nlast-modified: Sun, 03 May 2026 14:12:38 GMT\r\netag: \"69f757d6-321\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":801,"size_decoded":1214,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"2ae028ac8b83bbb61963669703398af4","sha1":"68dd8f2c5241331ced97f7400e31d40bba2900db","sha256":"57a1356686884718fc655255495c865822cb2d0714565da6e9898240d9889c01","sha512":"a9cf6e012e04f6e51ace9259dae3f7d1ca057934a0b95bedbe183f561fc8f8d0b6ae48f478eec442d61834441d787b0a9d521b9d89a5d1673946711255a80e6f","ssdeep":"","tlshash":"8801c56b03b358b0ca12d83fc1130ce7b8b7d0273a40e24c5b1fc370085b0020074364","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:50:58.983783Z","times_seen":117,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":41,"connect":233,"send":0,"wait":233,"receive":0,"ssl":240},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"adminapi.shieldeex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.ap-east-1.amazonaws.com/waihui/bluzelle.png?2.0.1777896487329","fqdn":"newbasset.s3.ap-east-1.amazonaws.com","domain":"newbasset.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.160.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcdomkd.com/","date":"2026-07-17T15:24:56.223Z","timestamp":1784301896223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:9F:69:28:88:A7:18:45:4A:43:74:6B:73:20:FC:48:A9:D5:6E:4C","sha256":"35:AE:49:39:4F:AE:A7:68:F4:40:96:C2:6A:B2:8A:CB:48:0B:93:27:D5:F6:29:80:3F:14:A8:9D:61:48:AC:C6"}}},"request":{"raw":"GET /waihui/bluzelle.png?2.0.1777896487329 HTTP/1.1\r\nHost: newbasset.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xMD6AIxqv9gEgfxzkpr8iYuoguuqzVP5BvPGRY99RUHo3zFwrd4hdPaPyx2p+ab/0hUzhSC6XNA=\r\nx-amz-request-id: CQXDDJ699HVJY35T\r\nDate: Fri, 17 Jul 2026 15:24:58 GMT\r\nLast-Modified: Thu, 23 Jan 2025 14:17:03 GMT\r\nETag: \"d00efbbdfd298720e829ae2434e8300f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7\r\nx-amz-meta-s3b-last-modified: 20250123T130954Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 25833\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25833,"size_decoded":26362,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d00efbbdfd298720e829ae2434e8300f","sha1":"5ce11234597ef8050d23bc55f1bf48d4a1152451","sha256":"f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7","sha512":"6d2425cd1c13c3b83701c51c2afee6c08449c491422f3613f956025e1623993c78d242d4dbeaca645f298d7fee413c9268374dfcfe0766890027eb5c796ef3b7","ssdeep":"768:3EMrF5XvEfBimA9K2mX7VDsJHCf96WOdkKCbjGO0hb:3VR5XEBimAQvGicWqCbp0","tlshash":"72c2e0aed8d8c48878afaa3179d5c071d7b5e9bee9717c2271ce843319507071c0e9b8","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-17T16:01:41.241033Z","times_seen":112,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":1359,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}