{"report_id":"c18640da-7a4b-44e7-b756-12e83f938af4","version":0,"status":"done","tags":[],"date":"2026-09-23T16:08:47Z","url":{"schema":"http","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"172.67.207.195","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"title":"GoldbalGold","dom":{"size":161950,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1992)","md5":"c9420d03b6aad5b4957d982b33af2ab6","sha1":"c5d3cad9079e676fed1ca3344feb92df1de12a8b","sha256":"1cf4ba3a7a97749bdb7e03cd94cdbad4b90a3ba55b02d0df21b16e026b791cb3","sha512":"72431252e2a03f3b26ca53f5aa9fbd73607f30191d0b4d7f66ecf5bcb688306c2f71fb2a3861f7a3108f15cc2a7afef2cfb0398999aa772831dfdc99e56cd923","ssdeep":"1536:DSdb5N7wk5iBAuq6UV99dL3MqDe6xR/sdnMMGq4PeKeZHYamTlk2IB3o+HiTCNir:eD95ruNib4AheoBYu4MGOp","tlshash":"36f3c754f7ea043a247750c69bb6278675fa6033d64bc4093bbd46903fc6c09b863bad","dom_hash":"domhashe5bb04727dcf60cee41711b24d312433","first_seen":"2026-09-23T16:09:10.544636Z","last_seen":"2026-09-23T16:09:10.544636Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"172.67.207.195","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T16:08:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-21T00:42:51.292364Z","alert_count":0,"request_count":3,"received_data":270429,"sent_data":1430,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"goldbalgoldexchange.asia","ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":2122311,"sent_data":16024,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-09-23T16:00:40.394227Z","alert_count":0,"request_count":9,"received_data":111607,"sent_data":5121,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":1,"received_data":45274,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":3,"received_data":330338,"sent_data":1714,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.huobi.pro","ip":{"addr":"18.239.6.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-09-19T07:14:50.212926Z","alert_count":0,"request_count":1,"received_data":476,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92b4245b03c28cbc93f614ba377727fb","sha1":"9fbb3618904ba19a1a4ac0fd81ecb206fdbb748c","sha256":"88bdf429f968335478b84b9cd6d7214ff41c39c8bafdde03b07de2e2a58b8320","sha512":"0821754bae4c3aa501417e22f2f2cbe425fdab58ce7974f4bc5714bdfa8977a134c3df1b098f737bcd37746461c25d5e5fa57526cf8e128710a557b9feee2f79","ssdeep":"","tlshash":"5231bd1483b6e77cc7d530edb987cc69023a0c19b6e6a7dc590bdc409a4043afa14aeb","size":1727,"data":"","first_seen":"2025-10-23T10:24:10.029253Z","last_seen":"2026-09-23T16:09:10.583244Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d9591c733f690d119b31475524ef625","sha1":"049200886695c09cbc32889171922594c426776b","sha256":"72081b58b5513ae97742d35e267bcff6622517e71bb51eb261232830bc5b672e","sha512":"78ffd22302a9580dfe9bda73a2866fd867e6a7a9008195563f67d89093c3f682c478f4c07d41e92b0495fbd588c93fd72371af736af960b97071820ca6f4f010","ssdeep":"384:ubYpA2XqL6zn8B4YJzSzJu6D4ZG4CNi+hr8yKfsVsiGRdNpv3KMQBtYnV3rwI+Cy:uH+u0RqyKkVsl9vBqtaVKN","tlshash":"6dd25292f7bc57760a56419faaee40e2e7259129326fc60e3d5cc12817e1d3887e23f4","size":30716,"data":"","first_seen":"2026-09-23T16:00:46.155465Z","last_seen":"2026-09-23T16:09:10.583856Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f07c1b860dc06025723e8777f4c5d58","sha1":"ae464d7649ab8fe25fc63c5d677fb434b0121b6f","sha256":"6b67e8a16c589afda20ee9ad1a7c87dccfa05a732cc8641f3f75748500d81c7e","sha512":"fe32e1f853927a9a8765a028dbbaa63663a3e38dbbfe0087ce8eb25a3ade3e144c30dd92f6709f1241ba5a84953fa4222998c3be9b175bae81165b3ff8d0bda1","ssdeep":"","tlshash":"2b01d089bc467076ab96322c723bfa0751621215684469335dfec7bbef32d9b411368c","size":741,"data":"","first_seen":"2026-07-05T16:59:45.771711Z","last_seen":"2026-09-23T16:09:10.584733Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72925eb25e50bd270debdd55cac1beff","sha1":"bf51ab67280e9d4ea597514534526f0191410e74","sha256":"55075d86ed2b155a7d62a7b40f7dcbffad8f1e2a56504ce08707931b5ea72519","sha512":"4de4425fff3a37406b2829fd74005693c4a0aae55cf33c6cd124f55ac9e5ae743d81fe57fa49a40c7711eab1b258b93bd277ab69efa957c7a9a877b99ed89ad7","ssdeep":"192:xI9wKCCBm9wKCC1u9wKCCXO9wKCC9u9wKCCssxI9wKCC7O9wKCCeQi9wKCCTo9we:xIvm7uVOrur+JOAQihoTuhK5Mh8N","tlshash":"b822b46cf993286c789334258f6f005438e87547cb49d4193eada8c26f8850da5bbfde","size":10276,"data":"","first_seen":"2026-07-05T16:59:45.773115Z","last_seen":"2026-09-23T16:09:10.585304Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b775e0cb018a5df0c891676f208d30c5","sha1":"b027e27c61190e3132d6eee4836c3d71f8796ce8","sha256":"25d1c22d0b19ff411e588e0c9752ce40633bfe292ed82f300b2743e3c907f742","sha512":"9abd92b3dc165475b6408de238f612d3985f652cb264b2fff9eee1b91aab6ec9672310fa4c63e81a2c5c646e79a56f6320807b81b0add68681ddb6d77d4fc0d6","ssdeep":"","tlshash":"510162acba532878385324118b6f025434e83547ca45d4183aada9c66f4810d6dbaeee","size":779,"data":"","first_seen":"2026-06-18T16:04:29.468625Z","last_seen":"2026-09-23T16:09:10.585897Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"769de4dc67c27ca810da5ea6e66d7c68","sha1":"442d7bbf19146e61c11d94a1a5c4dcd8d920b8bf","sha256":"d98b607b6723cbba37cee613b6f71f1c384e71fdb9c38aef6a5172389bae341d","sha512":"ce8db8b4595772b4303b40080212fcd2913310d1da25afac4d43c8bb886f2f1d76a105b66d428e1960284943c30a7fbdb218142cec9faf4d6587e8fb6ff1bc37","ssdeep":"","tlshash":"2801962cf493347c787324218b6f009434e83547cb4ed8157aade9d26f4810a65b6efe","size":779,"data":"","first_seen":"2026-06-18T16:04:29.522002Z","last_seen":"2026-09-23T16:09:10.586477Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"45c7a37c8a750415cf9665031ec9ff93","sha1":"deb875a4bbfe39e40c9689eb0fed7c05df9008f5","sha256":"3330e635b2463874d23195d9e3869422af77f364c9e28688bc48d51a5e116c99","sha512":"5ac6f96144e918beafa12d849c8eb87e1c48983ed69a726398c3b2519b2932a3631b035c0ad20ddfbdd7f6d8e51ba1bb70b92b1c5fa97c0acd1b079845fec763","ssdeep":"","tlshash":"b801bb2cf457146e385324159faf005134e43557cb45d4147abda8c27f78109a5b6fee","size":779,"data":"","first_seen":"2026-06-18T16:04:29.517709Z","last_seen":"2026-09-23T16:09:10.587158Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"672750f48efec6212caec6e9a89ae93d","sha1":"4112083b64649dfbb7e8c310cdcf9eff47d2ebee","sha256":"9c17fdf3ef728223807e1964b8be4a1662d5bab74ac247c88f76558a921d5e48","sha512":"888822673cb278f92d2c19271b2c3015d08daea19160dc098cdb19c5fbea96c51357929cbd20c14e7fff4395ae25876ce6fd79e611ca1bbbb9ab919bcc719384","ssdeep":"","tlshash":"c001622cb5931c59385325158b6f00a43cfc7547db46d8153bada8c25f4810e65b6eae","size":779,"data":"","first_seen":"2026-06-18T16:04:29.513442Z","last_seen":"2026-09-23T16:09:10.588114Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ea880d2a526f03eb455a08f4898cc35","sha1":"a94d19a745091b10854e151b5ae9969086589859","sha256":"e59ad5c90bf7bf6f3f8ea38ffb3b33be433f0fa07fafd68f65b84321fca2f3e7","sha512":"9217283691db45755502c101b978aba5729fb48cd3ef580a138d21f4aec6fcbf91f579174946301ac0335ebe9ff0f57011b89c929a26699bb372fad3968b0064","ssdeep":"","tlshash":"c501bb2cf853245c385324159f6f054134e4b547cb45d4153aadaac25f5810965bafef","size":779,"data":"","first_seen":"2026-06-18T16:04:29.50447Z","last_seen":"2026-09-23T16:09:10.588926Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8559fe71f39030c71bf900198b9ddc3","sha1":"c261897413eb33ba0c4db1d1b6ee4329df2c9b5e","sha256":"78d67793e9d998c720d62f0b302e93cf5bf75108fd012673789f982b780d10d8","sha512":"3a50b6dbc882c831684638af444b952657e70ead3b55521b444bb1904499428e030f4a4252f9ca003f15f181c4cfb2bc377886de5ac712d7f88339dca0dcbe5b","ssdeep":"","tlshash":"8601bb2df457145c386324118f6f004438e47547cb49d5143bada9c25f5850d65b6fde","size":771,"data":"","first_seen":"2026-06-18T16:04:29.50878Z","last_seen":"2026-09-23T16:09:10.589752Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce4f7bd03ec4676291e085a178bd750b","sha1":"0cabee1fde36e8d612764d5496bad87f6b947d64","sha256":"cd451b11a60a7a0ff57ae1c2dbe524421f6c72dd8460dc595f623a07f6cfb324","sha512":"b97ae449ecfd3a344aee799c7d1f9bc2c578f371f0c4c75c8b22fad9b0e42d1d29192bcefba0e4a788063ce3adffccfc1ccc47a477f0a78d49567da89dea96da","ssdeep":"","tlshash":"4501962cf493385e385325258f6f404134e97547cb45d4143aadacc26f4850966bafdf","size":787,"data":"","first_seen":"2026-06-18T16:04:29.473057Z","last_seen":"2026-09-23T16:09:10.590476Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36858ee05ee8ea9be4d645967da7c2fc","sha1":"be04951b51ca19a8f48a6f5171216e9aac96e818","sha256":"a33b70ab0fa1dee65c0c2847637849e8b58ea9f8f2954acf2ba7c3a1b12146c4","sha512":"76f9ddf09e472f06cb58f641eedbcf91e2c3e018f0f2db2804227c7426ab3b2cc4f1854ff84604e64d11ec38a51337a18db8416024a637cec6a620d5df9be5e8","ssdeep":"","tlshash":"cb016238ba6315987c9324158f6f004234e93587cb85d4143aada8c65f58109a5bbfae","size":779,"data":"","first_seen":"2026-06-18T16:04:29.486739Z","last_seen":"2026-09-23T16:09:10.591127Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b597611a929ec9f4f6258ccd3e3ade0d","sha1":"b2899a14a483872e82a683c5387e2483e4369808","sha256":"69784e41bf4310cbccd5e11af1ad8fce4a8e9b2e02e9846ec7ed255a3bcebd4a","sha512":"58eef78836eca644e2557034d6c84e6694f8dbe9965db2da8e15264b36de65fad09dd9688b2af6ed19c4c815a25a2c247765deeb1df619dc6dafd24598d84904","ssdeep":"","tlshash":"ea01c2acb5532479789324108baf005034e43167ca45c4043bbca9c21f5c10ba9b6eae","size":779,"data":"","first_seen":"2026-07-05T16:59:45.786127Z","last_seen":"2026-09-23T16:09:10.591802Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9add9d1fa5099e2f3094da60dcfd28dd","sha1":"1d9a4c5b3c254fac54452ac7959b9fbb0ad387e4","sha256":"c9c9f970a783930c63e155c12570f22a9097a99f5b7d5d61ddf63cd4a25168e2","sha512":"60bdc8c584098c47dc392a4ccba1178f701a91299f7b4c9db309ccdfd47c1d5ddcb6c5b4adcc49670c605b828c6ddc6954494dd4c7399c5326d944b45e520052","ssdeep":"","tlshash":"2c01966cf653245c787364218f6f004074ec7547cb46d4193ebda8c66f4810d65baeee","size":779,"data":"","first_seen":"2026-06-18T16:04:29.483061Z","last_seen":"2026-09-23T16:09:10.592407Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"edbbe5c4920d48b4016899858ae03acf","sha1":"8b63bba0a6bc4269ae0ffd4b708f180c6d23c5f8","sha256":"cb75042b2cff10397f8937fae845e54efd863d174e1340de2784bbd43b83ac52","sha512":"79d571711593f780c9041627f41dd9bf925789cb0db72235ca0e47cb84e32a6b4f4a1bd335714418967a3eb473bfbfc139e82ffa4b81e54d7a0ccf31e41f55a0","ssdeep":"","tlshash":"ab01626cb8639898789324358f6f044138f93587cb45d4143eeda8c25f4c90eb5baeae","size":787,"data":"","first_seen":"2026-06-18T16:04:29.474939Z","last_seen":"2026-09-23T16:09:10.593336Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9dbe67496f7ed0530844923f206edcc","sha1":"78d37a045332ee4265020e5fed8de73366771d32","sha256":"2e51b60378ba392c79a9c3259a7f2d5486fb0ebf50b95e2d68ea4500e265fd67","sha512":"33533123c5b89c2ae34e693adbf263d1aed67cb735a9008a37f114519ba55b27a269152c44241ae38192a646f12181b4b09e357d01eef4edea79bf7288089cf0","ssdeep":"","tlshash":"9301626db4535868386724158f6f018034e47547ca46e4163aada8c39f4810e65baede","size":779,"data":"","first_seen":"2026-06-18T16:04:29.470953Z","last_seen":"2026-09-23T16:09:10.593959Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7e941c42d9c95dd2212160a9a2782c6","sha1":"0d071c193272c22cecc48269f1bb7be08c8ee1df","sha256":"0f3f1917c6131cb8540b4345df1cc59212dd726852a57cc5bb924299a1dda791","sha512":"22766b32ac066c901e234551d76b3a1a8b8876511b467c30c06699549ecb244ada80203c3a61693c1e90c177048cd9ab87b43c979ca7a505aa4b757bc00621f1","ssdeep":"","tlshash":"e801f6adf853285c389324108baf005034e43187cb45e4077bacacc32f58109a6b6eef","size":779,"data":"","first_seen":"2026-06-18T16:04:29.479718Z","last_seen":"2026-09-23T16:09:10.594487Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e29c61cd9dc83857bac2b607d760d36e","sha1":"f4d4494cc3c304e04f6a7aaa47859ece80cbf857","sha256":"ffe355b6a8b7403c381bbfb7b0949350fba939920055113be765901c1839b030","sha512":"f3bdd3c8d0ced273d6d5eeabaa4883b6ee42b4094e4635c0701735817c482f11194f67907d6a33194df71dbac5aff76f6ed0881d6524194b0b4a6f0c53c73602","ssdeep":"","tlshash":"ed0196acb853156c785324118baf02a434e83947cb49d4143abdb8c26f4890ba5b6fef","size":779,"data":"","first_seen":"2026-06-18T16:04:29.526078Z","last_seen":"2026-09-23T16:09:10.595057Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84bdd3497157c62f46e9c30b71c163ec","sha1":"d61eb0acbdd076a8e8af1511f08bf06ab0235bdf","sha256":"938bd9f4b5577613b3e48614e8a553bd1e14448c4f716fe84610fa4f3019eeeb","sha512":"0bd5b27e0e8bbe2192eba852364365e78107a8d234c74e3456672262746683ef3cd78d838c7dffc8f6ce0a96203cbb93147e641beda10024986b23ea4481e974","ssdeep":"48:+YdVC+GY/lLXJjPvlb8MogO7toQCGGNAqayoDRvZgEVd0Q:+YRNLZT4LCjiFhx","tlshash":"94819a3366b31c4209ba367e037b0005797ca12b298acd1ab7de67c06f664f57854eed","size":4111,"data":"","first_seen":"2026-07-05T16:59:45.795736Z","last_seen":"2026-09-23T16:09:10.595777Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e951ccadec7053c28ad5a64f31d481","sha1":"13328ffc309fc222bd1e5009d029c2b2e6d55819","sha256":"521b2f7c72caa8b0063909fa695494538293dc98ef65e03f282c3e482aaf86c4","sha512":"0eafd63d06bbd402c5ad10ea1e15765b143c5b42407a32908e33f5e194e52ca446afc2194d4b4df6d66fd1016c834c642e3eecad144015ce44b25464ab13ab55","ssdeep":"","tlshash":"a1f0c96e0a1ed7ff709802355326a2ee30cd4baa90076407fe87021716ac018bc01ea1","size":522,"data":"","first_seen":"2026-06-09T08:24:23.860945Z","last_seen":"2026-09-23T16:09:10.597024Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0493b16288b05cf354a6089113f6870d","sha1":"59040bea326e362335dffdf80038b194a14ae72f","sha256":"f94367639ba92ac2b18938900ec24d60af1a9c53b0d1bb7d75a5f9d10bf88dfc","sha512":"b13812b7c2d3acd24deb5a82984cfe482f2af29945cd6cf3efeaa9426b58e67f1b977e75e8ae9c01f7093bd01dbfc66ce7f717a3d89a341fd52cca6fad897088","ssdeep":"","tlshash":"9f3146c4df2d01acdc4853e82aad82cc0a3c3a703c339c696c185e389c68dbe9519d79","size":1715,"data":"","first_seen":"2026-06-09T19:00:23.03553Z","last_seen":"2026-09-23T16:09:10.597918Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d81b64898b39258242f30c41c9fb0a79","sha1":"cd64752861eacd6b0da0b6b6dbecfb6e814c6b5d","sha256":"41948649bd03e708df4542d16bc8381f46cda35b078baad4519006d97f9f5943","sha512":"5933893140273761f1c99276e19e444bf85f5c9529d61b27fbd817d08fb459296c4b274bcbad8f61e9d9029ce2c2d450d366d6bc6e564cfe08aaf89a59baffbf","ssdeep":"","tlshash":"09d05ec39b4d1058587b319784eb15cc005c426288920d89bc3d91908ca01ec5371f2d","size":249,"data":"","first_seen":"2026-06-09T08:24:23.86383Z","last_seen":"2026-09-23T16:09:10.59899Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04d15df257d708951914648821438d72","sha1":"fa764b2b955bbd82fdb724c669e9629b7de8400a","sha256":"1653dd37b11b164ff0a17577207d33d8eb500e7ae70cffe13bd501d2dba163b8","sha512":"eee6e487c666bb7bf4594dbd34083c76da0533e32c832ff46d2bcbca644a3b97d45dffd773554721bc616201e45c008a1f396197e640ad3e108105b043991642","ssdeep":"192:vMwMtwMz7iiZ/wMTq7wMGwMUwM3cxc1cNc9Q41/cfuWcXcFc3cBcNcbc7ayv/cdT:vO7iiZFqbQ41ouVayvi0L3y","tlshash":"03a25d887e7b113b187375e05efb078ab6cea047c2c5980c7a9c47803f5651ab8d5b6b","size":23000,"data":"","first_seen":"2026-07-05T16:59:45.80203Z","last_seen":"2026-09-23T16:09:10.599783Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-09-23T16:09:10.568081Z","times_seen":10466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js?211","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T19:55:00.986948Z","times_seen":505454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T19:55:00.986948Z","times_seen":505454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/js/layer/layer.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-09-23T16:09:10.559901Z","times_seen":16850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/bootstrap5Slide/scripts.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-09-23T16:09:10.582562Z","times_seen":8593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-09-23T16:09:10.580521Z","times_seen":17408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pako/2.0.4/pako.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07ae3b6b3b89501942776c01cc7f195a","sha1":"b2744f043034b7dfd5732a21748e5868ef882a5f","sha256":"83a0cef96bef8fd0b1ae3d260bd2cfa992d821820d435f54fcf274d09726379d","sha512":"1002b348a7b1f8f5c2d14f4e1b5debd74e7dcac8eb8e4244a59a0e3429d96b498144e636f2204e3b165212b515c352f32ebdbe5393e147bccf08f2a2754549aa","ssdeep":"768:gXHw8U/5KUTJ4dch4AAAAAATCLL5BI0PRHGrY8VdCCq/3t5IkwC9jRRdyFINGSzY:qwF9XkBtEJHaGgoW","tlshash":"7d132ab221f651a81bd00ce8918b0ba5657091722c4645fde77c9cd538b1acbf0bfabd","size":44260,"data":"","first_seen":"2024-01-02T16:10:24Z","last_seen":"2026-09-23T16:09:10.558055Z","times_seen":1572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"connection establish","filename":"https://goldbalgoldexchange.asia/","line_number":2222,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js?211","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.590Z","timestamp":1790179686590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js?211 HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\nage: 540989\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 149402\r\nx-timer: S1790179687.594522,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31517,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T19:55:00.986948Z","times_seen":505454,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/css/base.css?v=1","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.105Z","timestamp":1790179686105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/css/base.css?v=1 HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 18 Jul 2026 23:05:14 GMT\r\netag: \"6509-656eab4b8951d-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOn%2FgaBQN34hP3yOZ%2F3hcze9g79f%2BaG3rmW4gQSBpcw6A31oxl8LIIBOM3ty9iYgUQPZGyzLhSgrlu0glg0ILBrlb337THRtxLlB8HU%2BRermDi9CWjCJg9QmOXmcqgNseYI4jO6GiuGCrxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e28f80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5904\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25865,"size_decoded":6719,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"a83c4d1d1c065b7f630a122ab21ade41","sha1":"b0aa6a5a337254c4635ddff08ba4d7f8a2b85389","sha256":"a60503d65473f3bbfeb689be9ac99de2a63250ba04e6c869d4c63a28b3f29004","sha512":"d5b43436982b254ac8b48c098a77a7734fc0b9f50312ea6150ba3f69c43508bdd898aeed1b581f459f340013cec1b131b4a6f6b6d18911951fe7c2cb5028951e","ssdeep":"384:BpFiOVTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBx:Y4cN39FDwFx9EZS9YzqtRB8TF3MDwi","tlshash":"e9c295a7dfa30905b81bc5a41ff9ab15236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2026-09-23T16:00:46.092131Z","last_seen":"2026-09-23T16:09:10.548347Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/imgs/community_bg.png","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.419Z","timestamp":1790179686419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/imgs/community_bg.png HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/Public/Home/static/css/base.css?v=1\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgQMLKnVhkGcK7QQAuF8%2By4DJARi3rlGvXoykHts5aoDE72IPoEPTgMYM%2BMPE%2FO3TJexhUBjsdjIo5WrnU5kudU4FohYtdg9i9Tdf57EZfrxHZMFI7dEC6VQSBia4b%2BOTU8XhWsUtWVEIRc%3D\"}]}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: W/\"3c99c-5ee9fda3a0700\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 501\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face6029250b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248220,"size_decoded":237555,"mime_type":"image/png","magic":"PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced","md5":"3107a5d7de66ac526ba295a6ccb85e2f","sha1":"7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9","sha256":"1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f","sha512":"262a6554428da7f2bffcc71915ee13f5e9a504a2e76af61499ba7ec68713fdbba8b2f52d9b6ff8a9b13ae649103c6aaeb2e89f0dcf5411ec636a7c6ca5c26f7d","ssdeep":"3072:2cI5zu8n4youkJkjKrt88rRhc0ZmoZ/UYO5+90yCOo9XHhNkHLfuZVrD0BMdJ2oo:2V5b4G0ks8ybkwT9vBo9R2iP30BPdb9","tlshash":"73341284fd1e6df6cdf40db008629f4c7935a6ad8835d713a3b6e15d9eb754008be680","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.549112Z","times_seen":7586,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/js/layer/skin/layer.css","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.462Z","timestamp":1790179686462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"36e0-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 501\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSLwHraDRZwOVoEMlWXESB2KUdd9%2BGijr8FT8Ez6%2BipS6nYG1nMUxpJrAj%2FepRNAJluINsEb0SB%2BkKpJ1g1Tnfq9PMwhuZNmMP7%2FhU0ODFQQZZN6HJzZ4bV3EzKMQu8lDrOBhlJPiRKsbuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face6069280b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14048,"size_decoded":3680,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-09-23T16:09:10.549961Z","times_seen":5684,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/vet.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.136Z","timestamp":1790179686136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/vet.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6dPCKGEP6L7rdHHpKJFYzpfgaOErmCQTRtbzvbLysx/Hz5FuxukysnXjdczYITq/ifcCWtQzKHI=\r\nx-amz-request-id: SG1JJF4VZ41X6VHJ\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:20:33 GMT\r\nETag: \"d11a53456b440952c1991dd52dcc8db8\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 808\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":808,"size_decoded":1168,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d11a53456b440952c1991dd52dcc8db8","sha1":"2150da05914835ef0cdb9ae1df472dcf6bbcf643","sha256":"4a37b785c09bbc07829e36eb139a4a92b7177f4be986b871f3fe6d5bd3897c63","sha512":"3c190c2e7f2f0fb8deb54a8375bcbace913a6c7395599a33c5c35acb3c07fd125549843f2b091c64675c2c2af760096ba35820abfc28a6b7b70ed406113ceafb","ssdeep":"","tlshash":"c80141f6b1c8a23c99059340992b995239a33271775bc4a4f3843f1055041af8b34ec5","first_seen":"2024-06-09T14:45:44Z","last_seen":"2026-09-23T16:09:10.550798Z","times_seen":418,"resource_available":false,"data":null}},"time_used":7333,"timings":{"blocked":195,"dns":0,"connect":258,"send":0,"wait":285,"receive":0,"ssl":6595},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T16:08:05.012Z","timestamp":1790179685012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7hv6HskqMcT%2BibCOc6ch2qJ%2F7e%2FoKR%2FmGZEF%2BPxvW8RwC2P1e0Rb0K8Y%2BpIuZyIMekhnj5kqkXx3wz7xMUkZk7MKYZuxTkCrocA79Nz%2B%2Fu9I1%2F%2FKHHc%2BIMmqdg4riOBjuLb%2Fsryi%2Bwj8dw%3D\"}]}\r\npriority: u=0,i\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nset-cookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97; path=/\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3face57f88a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"vimv0l66htpmbjh1epb0trgb97","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=vimv0l66htpmbjh1epb0trgb97; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":156686,"size_decoded":27788,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1752)","md5":"b8fbd4acb3821595e2b57d72de7a9df8","sha1":"5ca6aade40f49d1ea0928dfdf2734bc2d59febc4","sha256":"31a2ab88d9ce2d43bc05c080ed92b72c6069bf05e41a2bb3da48ef28f735b5b5","sha512":"b1622cfab9b1b656d64c22956bb669eb01f7e9861c32439085821b1ccb6cd2cb32774ad807b73d0961feef951a4c65bdb1fc6abc28e269d32972603ea1af143b","ssdeep":"1536:gSdb5SwvNg/7uU6U+5f9q4wjhVH+1qyKO89vBYaVzMNrGBURO7iiZFqHayvi0r8:R/NwuF5U4AheoBYuzMGOo","tlshash":"23e3b754f79a043a246360c69bb6568975f96033d68bc8093bfd4b903f86c18f8637ed","first_seen":"2026-09-23T16:00:46.133304Z","last_seen":"2026-09-23T16:09:10.551769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":66,"connect":21,"send":0,"wait":607,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.112Z","timestamp":1790179686112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\nage: 540989\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 149399\r\nx-timer: S1790179686.146194,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31517,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T19:55:00.986948Z","times_seen":505454,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":10,"receive":5,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/imgs/hot-2.svg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.123Z","timestamp":1790179686123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"1ade-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mil9kk2rHOXf5ulBqQ9%2BwearZk9sbVkdrNW%2BHVn4K8sEhBmTWVNXRBKdFTjlqTJIfQrvjUsJVM3qYuII3ngbN3gIl5em%2B1geWAGeTKDJjbXKSASU9uPME8XNQNM34lqvPR0%2BEu3c4a2iJBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e48ff0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6878,"size_decoded":2605,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.552737Z","times_seen":7535,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/6a26dd52c303e.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.121Z","timestamp":1790179686121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/6a26dd52c303e.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKStwxYkTOowTmdDAe4IDLr1PpPbCs7WWOS6o9%2BkQmDXDl24ovsTu4dP3XCqaP4bqowyjMmwkrRI89WaijUcXtXxNPDGHPtcVSdFi%2B8SqujQ2jaIhdK9GDlLNnr0%2FeWTSuYBlnfM0XfzEaQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Jun 2026 15:18:42 GMT\r\netag: W/\"15e17-653bf86947880\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e48fe0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89623,"size_decoded":88799,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1254x1254, components 3","md5":"eb94a8260fbc6c77e7090c923ec7aa12","sha1":"b60e8d435c2737f5c67be20f7670e87b766698bb","sha256":"ad3f9621d280703eb653ac34fc729c60fa6ae547e1c920fede220101514dc64c","sha512":"310e1b7a56326bebe055921b96bbea09d963c2339df464aa28a48e0b8439c1ac98a77d0344f03e394499d6788bf76f62e04ecd452d545f64bcf09017aace29dd","ssdeep":"1536:NHRHPMa3BrQrnTLxj7x8FFV4ggs67pCzS4MRHvTR+QE2Nm4znVCtRcyD6hGom:NxHPdhQrf57Q7NgN4zBMxvMQhNm8nwt1","tlshash":"cd93020e8e01b71be1d6873d1d994a9938191d86d0136203d3b70b5a23be6b96de5bf0","first_seen":"2026-07-05T16:59:45.728098Z","last_seen":"2026-09-23T16:09:10.553362Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/6a4cf77bde566.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.130Z","timestamp":1790179686130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/6a4cf77bde566.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lksjsQ2kTMk2WOj%2FY4gcGCJgA4shxlaIMR8F7wzabIApJeG0VpmDgt1vaup3yx48Y49JrFB9691hJQOc8GFdJPmVLBqHSwj0RvQ3tO8EoYUnwbXv3P6X3pwix0hadwh3OcesVrpIueu%2BXw%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 07 Jul 2026 12:56:27 GMT\r\netag: W/\"1b99d-65604eb4da140\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e59040b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113053,"size_decoded":113824,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x562, components 3","md5":"41de5a2751ca453083a76953c642da1b","sha1":"e65c13ce22d1b006b1cb403e1e41a3da3e22f824","sha256":"ad5782c5b23071038216e57aa18e61c298f186adf60ed4c70eb5962536217c41","sha512":"b3c6baf08eb8b1931d4e7547a6136bb2256db6a4260cfa24fb283e9ab01abefa42e769483e3387e96afe1db4c584d0bba760d6193ed2ad481fc92ad3d6f738e2","ssdeep":"3072:8ilI/O6FXhgnYp48rDKB8LLQLvRf+3z4U:8Rm6gBaKMk1+j","tlshash":"f5b31230644a6843a228f42689894637bf13072de6930cef61d479fe5ce5a1ba1d16fb","first_seen":"2026-09-23T16:00:46.096736Z","last_seen":"2026-09-23T16:09:10.554044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xaut.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.138Z","timestamp":1790179686138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xaut.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: B4EkKDXC16XKlIxPfGza+2QeA4gQaVkSifK25lYewLEzxmFJmXe+nCS0YRAZr2e61PFpuGLkoE0=\r\nx-amz-request-id: SG1XBQ6FGPGA87KH\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Tue, 06 Dec 2022 03:53:42 GMT\r\nETag: \"0af06a926d3184e2ea9c4d5666892f4e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1425\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1425,"size_decoded":1786,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0af06a926d3184e2ea9c4d5666892f4e","sha1":"1da61f1477bcbd0065df3d0e03d58d606de0fc88","sha256":"7e39ab2954288b261c34d85bdb78ce3c627933a231d09d1a31c82f457f000724","sha512":"0fd22b2b1d46e97b44cf1cedc94188a4e37a98ce7336bec01d59a695975cde24a4ed5c411d300f2917d6daf6674a4bf42f94a254b62e906efd224446dea39d8b","ssdeep":"","tlshash":"8421028cb3b8d1e0e504a3f8c39fac742f3314db6717c438e395a96a7e5811e899459b","first_seen":"2024-08-20T01:04:42.350656Z","last_seen":"2026-09-23T16:09:10.554778Z","times_seen":59,"resource_available":false,"data":null}},"time_used":7614,"timings":{"blocked":7333,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bnb.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.140Z","timestamp":1790179686140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bnb.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: s2bh5r1TT1Yp5EVspC+MFcrAsY6ID4FZhxLqEzjrdmFPmCnRBL4qkD/vuCxyAaoqLtBfa9BVyR8=\r\nx-amz-request-id: SG1KQZ5WTN52ZVA9\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Mon, 10 Jan 2022 15:02:55 GMT\r\nETag: \"bed74791845ecaea0b78be9b10c690f6\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1015\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":1376,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed74791845ecaea0b78be9b10c690f6","sha1":"ca96e3d4056d851ed301eeb4a2adf8e0103b8c4a","sha256":"7a938ed34bf0bbd6dba92c49cc3911052777ac55306abee47300bc36b0e6aedc","sha512":"cefe77f1b27c043db212b67fd228a6a208b5e63f079ccfedec269fae9bfe964c9be8b423737c3e16d0f112237808a623d101f4bc9e6f5b039e13747251db50f0","ssdeep":"","tlshash":"20110ea4730cd2511e0cd35a7b29dcb97652b4e6d782910015c6250aafa4aff1c70fcb","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-09-23T16:09:10.555404Z","times_seen":262,"resource_available":false,"data":null}},"time_used":7745,"timings":{"blocked":195,"dns":0,"connect":266,"send":0,"wait":290,"receive":0,"ssl":6994},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/xm/doge.png","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.143Z","timestamp":1790179686143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNzl0OyAagEaQWM%2BPd9lP%2BVy7LD%2B%2BNn787ou%2F6c2IwC8DuZj5DTd3aBn5tOUY3U4d42KlFrk24KhsBcNcGOgnL9q58OuqkkMVe0hdFos4sU6TWFphEv0MkSMJkm40ddU9mqkBWWiSVmqkdQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Jul 2022 00:20:44 GMT\r\netag: W/\"838-5e303d2c3af00\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e69070b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2104,"size_decoded":2897,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.556125Z","times_seen":7826,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.146Z","timestamp":1790179686146,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pHEbRfxpPIUlKItBKPYJAOdwG/odVgsqzEMAuPb0/J9ag7fkKxQYga5G0I71cN22uZu0b9Gmq8A=\r\nx-amz-request-id: SG1J29ZK0VR3DXKV\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":610,"size_decoded":970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-09-23T16:09:10.556785Z","times_seen":606,"resource_available":false,"data":null}},"time_used":7772,"timings":{"blocked":7497,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.249Z","timestamp":1790179686249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 23 Sep 2026 16:08:06 GMT\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-09-23T16:09:10.55741Z","times_seen":4195,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pako/2.0.4/pako.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.201Z","timestamp":1790179686201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/pako/2.0.4/pako.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 135661\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 29 Jul 2021 16:33:42 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgdJHTkt1sP5MXVTdEjXdcweaoSuMI5%2B0ddHYmOMmJgPbyvbKZ4SwnRxuNppcEt0pOJeMmKlUuoKfcfzaM8NYWgSWmnG0G2jwXtoLzHxNStERzo1Xdskje4URdV9xz2iHiR48GrF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3face5edfd656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44260,"size_decoded":13684,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44186)","md5":"07ae3b6b3b89501942776c01cc7f195a","sha1":"b2744f043034b7dfd5732a21748e5868ef882a5f","sha256":"83a0cef96bef8fd0b1ae3d260bd2cfa992d821820d435f54fcf274d09726379d","sha512":"1002b348a7b1f8f5c2d14f4e1b5debd74e7dcac8eb8e4244a59a0e3429d96b498144e636f2204e3b165212b515c352f32ebdbe5393e147bccf08f2a2754549aa","ssdeep":"768:gXHw8U/5KUTJ4dch4AAAAAATCLL5BI0PRHGrY8VdCCq/3t5IkwC9jRRdyFINGSzY:qwF9XkBtEJHaGgoW","tlshash":"7d132ab221f651a81bd00ce8918b0ba5657091722c4645fde77c9cd538b1acbf0bfabd","first_seen":"2024-01-02T16:10:24Z","last_seen":"2026-09-23T16:09:10.558055Z","times_seen":1572,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.106Z","timestamp":1790179686106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"2f0fa-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMkLfVMEPN%2BDP4l9kggB745DOU6PpeW0%2BX%2B8Cy9BBsPnzhxcIJN2BQL0jxydIDdKexdWPMpiXcliZhkMIuzFT19KwkGSvag9mcapFJMQxE%2BadXdNqJeIrJFw57%2FYxclEV%2BRG%2FIBXtG5e21I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e28f90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192762,"size_decoded":27102,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-09-23T16:09:10.558724Z","times_seen":5722,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/bootstrap5Slide/style.css","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.107Z","timestamp":1790179686107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"24d-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvb311Mjd4dSSCNOPOBWXj5JI0Cax%2F%2Fss%2BTdEzqVYpdaUShXIUOXPZp4USkOqWn9UDXSn%2FYKZKmgdnKWv7iggnmpWPL8IXGnjWKmzQdW9Zcga6MKo6HSW8OtDgR524TgP0IS9NKO%2Bhu0%2BQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e28fb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 195\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":1012,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-09-23T16:09:10.559298Z","times_seen":8581,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/js/layer/layer.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.113Z","timestamp":1790179686113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"4d83-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j19yaprMjv5t%2B2f6DHhZsCtwnwlm0f9pE6qCqQJJoExzukcy1ccfoY1jptaGjbMgzKBsjicaUh2MsGB0ZEpM7PxXRr1RVF2DJ1EQ%2FcVuwajOWGhWiMG4hFZISICBKKpEtDTaMbEesI5LCjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e38fc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":7780,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-09-23T16:09:10.559901Z","times_seen":16850,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/xm/1613786496962262.png","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.131Z","timestamp":1790179686131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbRJ2uA9xteUZWCNIWEb7CZbZgjfVsm5eNI2NDsFcHZQAxabPKkWrxtPy99T%2BBT0egwUTDP8Xn4JVFrKh9zpkl%2BI0d87WfHKBFpGN88tgQ3hmMlPYhMBXFL%2F9WOveB6ctQ5QGWQlfzAiZOU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Jul 2022 00:20:44 GMT\r\netag: W/\"a83-5e303d2c3af00\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e59030b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":3416,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-09-23T16:11:33.535933Z","times_seen":34525,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/mnt.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.134Z","timestamp":1790179686134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/mnt.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: uXrqU++p+j7meDyjkZOBnHtaKLMwZR0DwDMyRhxT8rWyZpyY1vch9HjJMdO2Eayqxg2uQ7iMDZ8=\r\nx-amz-request-id: SG1R9Y47JZDGAHE4\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Fri, 07 Feb 2025 08:50:51 GMT\r\nETag: \"bfbe6b0405422cc264680437fefcfb96\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 29193\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29193,"size_decoded":29593,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfbe6b0405422cc264680437fefcfb96","sha1":"c6b51299017551415982de1d412e90d05d7d84c1","sha256":"0a543865636f37f781adb998e145a6ef5a8c87c9fac6a077fafc3c703e9a8800","sha512":"9930d3e7941377d680207ca7b70da191463d20e19b6ad4c85a47f0ed1ffc2797f45675c488d8f411f26fc60a9682285c826c4deacc2e563042d0e92de48104ff","ssdeep":"768:gEBJN3nmxAwTxC4nphzFZnToJu2yN4tIzh2v/lv0lahA:gE5mxAwTwatFuDyN4tIzI/B01","tlshash":"26d2f158535aa13fb7d822dc3ac7f826f32a518cb180f05227d50c66633ad872d547d3","first_seen":"2025-03-06T11:30:53.668336Z","last_seen":"2026-09-23T16:09:10.561788Z","times_seen":192,"resource_available":false,"data":null}},"time_used":8269,"timings":{"blocked":195,"dns":0,"connect":261,"send":0,"wait":289,"receive":786,"ssl":6738},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/arb.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.135Z","timestamp":1790179686135,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/arb.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0R1gs8GNldX/wMnrzZlkb53q4+wcHO4oIXexy8ZXwybQkHQ20EEruY8UrO2EZaPliI7o1GM4gWI=\r\nx-amz-request-id: SG1R9J7MKFH8J1Y8\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Fri, 17 Mar 2023 08:17:09 GMT\r\nETag: \"86dcbc5e0668735029bf993cc456983b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 9302\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9302,"size_decoded":9701,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86dcbc5e0668735029bf993cc456983b","sha1":"4edb992762df36aec6116269479b2fa8fe94a07b","sha256":"56e0f6438b7b77bd721a88d029dcd955a2b2579011f4f87a60a9e1010edd20ac","sha512":"5fd9d11b4f1eb56662c88b2539cb4b122249898b51385d6a18aead30e497c3b50475084a8d68cac78d789e6f68aaa6284d794bf3129e880b6d8621cbbb34c294","ssdeep":"192:THEa4uwL9Vjsx3KbjBuWdedz43d/5OxF0OJ0mKgv1BJWhEIDEeHI:Tkmk9h5BDdWz8Q/T0ivpW/I","tlshash":"3712858477aa95bcf404b3ec4617ac707e522ceb3a23c59e83d52d1ad99141c4ab4cef","first_seen":"2024-06-09T14:45:44Z","last_seen":"2026-09-23T16:09:10.56435Z","times_seen":474,"resource_available":false,"data":null}},"time_used":7513,"timings":{"blocked":195,"dns":0,"connect":254,"send":0,"wait":323,"receive":254,"ssl":6487},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js?211","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.195Z","timestamp":1790179686195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js?211 HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\nage: 540989\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 149401\r\nx-timer: S1790179686.199595,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31517,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T19:55:00.986948Z","times_seen":505454,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.460Z","timestamp":1790179686460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://goldbalgoldexchange.asia\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nage: 450267\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\nx-served-by: cache-fra-etou8220039-FRA, cache-bma-essb1270032-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":107537,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.564908Z","times_seen":12974,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dot.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.139Z","timestamp":1790179686139,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dot.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8WMhS4K9cyDQz8sG029LtX1YRplxM14AkNkTEpmB3BTEqmZVF/zryOUSeuRZxdaUF3jy4fmE/n8=\r\nx-amz-request-id: SG1WES5Z9MTBZ77Y\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:58:32 GMT\r\nETag: \"ecbeee3b982b8166e9b11ef7f85a9bdc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3040,"size_decoded":3401,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbeee3b982b8166e9b11ef7f85a9bdc","sha1":"79c69d70b46af0d2eb0447096fb9ef48873d24b0","sha256":"2d212db8dacb8164a85eec84c39038a4013d398d1fdbc680399c260a013f52a5","sha512":"6a47534c5310fbded78567b1860c94d6bd07e2e186fd7fb5057431d45b5fc80f580fc6ba4a5782e034243d2c9f1f47dc732dfab74551fc14f52b0a40e11b9472","ssdeep":"","tlshash":"d6518591b339d2b8b005f7fe023a6cb1ab926de27e33c5a55bd60c14d04740d8a925f7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-09-23T16:09:10.565622Z","times_seen":743,"resource_available":false,"data":null}},"time_used":7694,"timings":{"blocked":7415,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/xm/ltc.png","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.141Z","timestamp":1790179686141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /xm/ltc.png HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=030YVxX2P%2FZgqSvwh18ZscZa%2BNPrzgbplzYu1G6Js7YwIJAQdFK2ZUfq64a8BPEpp2pXdSrLO20sKqyMK0IdAcx%2BpGzbiGD5RQ%2FoHGRuuG6iey5ltEBHlLLIJ2cWxf4NboKL%2BUxgjDv2DI0%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Sep 2023 16:54:52 GMT\r\netag: W/\"998-6049f7c4d0f00\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e69060b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2456,"size_decoded":3196,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.566788Z","times_seen":20095,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/imgs/icon_etf.svg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.150Z","timestamp":1790179686150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"55f-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYrRgAEWnTqJYqWibPikGb74XkKKqJktaQ5U6J%2B%2FuOsax%2B1gtEoOR2uPvGfmLOkKTD0JMY9z%2FLgtJUn4uxPn%2Bs8OSPrL7aDYwc9uAjdLCa3kXrHUCmYj98X%2BwWJJSubATkMDlAvfuOR4PAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e790d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 439\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":1258,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e432564e65f8779c665055d5bf9f563","sha1":"dc529670e33c8baace696f7ed4c3ef3bbe9cad90","sha256":"2df7417ef0acff023bffea1bf0c6366884770c1dab4d191f24ec29c84d2b7031","sha512":"cec79f984f55609c45347e0a6b9e885fec23baadfb00fca179eeed2b2902e5a8659649b6e4d7c0711a40bff90b8acfb7b8823a89beb53f9e836211ef89f17c3e","ssdeep":"","tlshash":"cf21e9fd204aaa29b35dc352ab2961f4184610fe1f35e4c1dbf855143c1cbfe495a1db","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.567394Z","times_seen":5022,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.197Z","timestamp":1790179686197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"1339c-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZh8Z9HoSkzIOUqdVE%2FqNkieZQFlUPtIOvpqIloT4E21LQ3UyCEMnNCXDbfZZu2DWvHvDARpAu9EdSE9DE27Uau8onNkBw5313e6H7%2FB9ZeHiEhqpqLTj8HEMgl%2FWHimDoNp%2Bigt6fSL%2FxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5eb9130b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22462\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":23288,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-09-23T16:09:10.568081Z","times_seen":10466,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/js/layer/layer.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.472Z","timestamp":1790179686472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"4d83-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxVXmpiScLQBtiiqBNmtY%2Br1je%2FR2trZYbn3ugNLHAgnXfhCbrIGdEW9KlXooG5m5hRe%2BqsVcu06%2Fb%2FOYWshgQnslJ3d8SIY%2BnKPWaUSkE3oAvx1qIwv6YmjGvnHv8IV4X1R7u1ua4s7a3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face6079290b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":7788,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-09-23T16:09:10.559901Z","times_seen":16850,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.huobi.pro/ws","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"18.239.6.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.597Z","timestamp":1790179686597,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://goldbalgoldexchange.asia\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 86xFCrcr9Rebh3adiC53+w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: upgrade\r\nServer: openresty\r\nDate: Wed, 23 Sep 2026 16:08:07 GMT\r\nupgrade: websocket\r\nsec-websocket-accept: GWBmZQ8dm4YcwVLQNdnnOVvaIto=\r\nRequest-ID: 1b3c0a00e58536440f4b35320711c552\r\nX-Request-ID: 4a7363d0512eb410562ef21431cc3c31\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 10958524dd572b571b69f94d644733fa.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: YUL62-P3\r\nX-Amz-Cf-Id: r6j1dG04uB8IlLWaadZmU5v4bcCPnVUi984FFSoEYWLMRv6DpHe2HQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":476,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T19:48:39.693098Z","times_seen":18622921,"resource_available":true,"data":null}},"time_used":1369,"timings":{"blocked":0,"dns":306,"connect":406,"send":0,"wait":550,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/6a13098a6c4de.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:07.560Z","timestamp":1790179687560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/6a13098a6c4de.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:07 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTXlAHxbx8xN2uYnrf2mBjHWAEhrGjYfgurlmyXVNKNPzMr%2FFQyKjq44RLXUSeB4HufIt7IqWGTgXGgrvMzKIgRwoKDB8JnMup%2Fmmr1dL%2BnM4e6Zm3uCGbn3ToJKJx0ryDur2qxmA5yZ8%2FI%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 24 May 2026 14:22:02 GMT\r\netag: W/\"4e8a-65290fc4df680\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 500\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face6749820b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20106,"size_decoded":20571,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 512x460, components 3","md5":"f50edb13de15e4fa39b9e3bf8f9c9cce","sha1":"b52bbe0a20636c33c4f15741363a0155c4a3c532","sha256":"1eee5d6e051fe2728f167d14911b2ac6e616e4356dbc127b9a48a2534aca237c","sha512":"2684b07669e06fbed768c44a9bdce981a3f7b3e2bd48a69ef0855d13482d6b9000d2ef3eadd90cd25b295050072eb9f7d31363430b97cfb59f1e1919798cd88b","ssdeep":"384:I8e0zZZ6wBXVeoHvIOaKiJMMQGkVlsZPdP1Q6nSOfeq0sATggXnJyB3DSE:p/B4GIDhKrG/VNQ6nSO7/ATggXJyBzSE","tlshash":"4692c09bee3f50dbe86d1f302cc78c51f72072016647677c9da26a4c4e258b85de12ae","first_seen":"2026-07-05T16:59:45.756914Z","last_seen":"2026-09-23T16:09:10.5695Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.101Z","timestamp":1790179686101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goldbalgoldexchange.asia\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\nage: 562055\r\nx-served-by: cache-fra-etou8220066-FRA, cache-bma-essb1270049-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":25649,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-09-23T16:26:56.217836Z","times_seen":28854,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/694ee3081d01f.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.124Z","timestamp":1790179686124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/694ee3081d01f.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T007liLTebzDHxwzHAxABk2Y7FnEQwomfeu0DbypzUY4W0ABAqpsIxHF9mBHvM0KILBSBzrQhVkuH6kYIZQERVqsxVnTurNx588nEYq6mEihpt%2Be%2FddWLijjmujXtoV56hyv8Ntf6Yygj2E%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Dec 2025 19:33:28 GMT\r\netag: W/\"9171-646dff7b8d200\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e49000b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37233,"size_decoded":37885,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 576x360, components 3","md5":"582acd6bd1a02dc8d8597474bbb2263b","sha1":"817c764bc673eefe1fffacf209e4271c66033493","sha256":"c2cd18fe07151890a220f52cc6901e85ce44efbe07fc720cf55aecb8f856f3e9","sha512":"e6a1dea037bb0203504455859f8889c550d8a2e8fcafb114ee224619bf86c44970a3d35707944afb3b0db23fe65115cf1a325f8e006a8afcc9bdc769ada38369","ssdeep":"768:V1sb4msTJWzEKPIQssukC8kgWbIZMNfGurCEKMNniI:XosTUYKg9BbAMNfLrCcN1","tlshash":"c2f2f10a7c127cbfc5b8073d1e97e122593ce8266885d1c2f2c968d5dbd62044bddaf2","first_seen":"2026-07-05T16:59:45.761573Z","last_seen":"2026-09-23T16:09:10.570909Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/imgs/icon_contract.svg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.149Z","timestamp":1790179686149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"487-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkwRP70MdAs9eMvYXS2SsH1NyBPl5iCKo%2FdtjhYBtTXBzhjToXiwSQAAREA54vF82GSi2kkdOXK2HrMhtXSQ3NGjGdFOjZEgZBiU1sc22c956qCYpRr58QpPW37UFQF3RLlkSEQs2l2zJbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e790c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1159,"size_decoded":1288,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be2edf2728aa394553b4fd9a44471f0","sha1":"1afec38a2c761fbd902e1de55d280424335aeeca","sha256":"306f962a6980e05ac92e3e8d3b1818e864f5557237541ab81cf2a15c44a190aa","sha512":"cd25567c0782132f9dcf858b252b11d1343a57a747b1bdbb7094b31baa1074528bc86fafeb66ac71997b4f4ae50e20c56373774f0f79fbf4b2ed339be8000ed4","ssdeep":"","tlshash":"b421ce69623543b9f04a82b212c9f47f353e06d8f1cb44c9e5671e20206e82ebca96c3","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.571581Z","times_seen":5026,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.103Z","timestamp":1790179686103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\nage: 1653781\r\nx-served-by: cache-fra-etou8220197-FRA, cache-bma-essb1270032-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":8777,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-09-23T16:09:10.572194Z","times_seen":17654,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/6a26dd6ca3323.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.128Z","timestamp":1790179686128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/6a26dd6ca3323.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INaws%2B4Ap2EFKLRkKueyhroUG8bDf7ZCUbom4mcQqfMJQfNarjpVrTghbdWghW86KSsgjw0TGg19uFoady1w53zXff%2B9ACclvPypQySyu40ll08mp2ZMzQ0U8kJZd7t2RaEVDbyHHf2eCAE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Jun 2026 15:19:08 GMT\r\netag: W/\"2e3ae-653bf88213300\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e49020b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189358,"size_decoded":189585,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"0b614589caf5ba7d7472eba0a503c08c","sha1":"6add1cfd54de697b040587d212baa3b9a2e3eb88","sha256":"2ebed1df0562f195b1ab455ad92c55cb1b4d3e5dcb41f6d3170025f3e0d99785","sha512":"4a355810d03f0c35fdf44d63a29606affb7810d5541dec691979b3ac64b30af073e3ecfcf07f693e67371038077dbf7e858eeb9597dcb5cd2f8e5fb99b499e0b","ssdeep":"3072:ExNiV8ltrGvrP8+Y/40nbwEh9gBfS+q3V7SRqcIbhiGEB921hVpGu6dtsyCB:EzO4psjSUEh2SzBgBKiGEBE1hX","tlshash":"f90412550d87ffe9ddd9587d1edeeb8b213a4ec90a884e815c0754e911ca7b22f208a4","first_seen":"2026-07-05T16:59:45.722369Z","last_seen":"2026-09-23T16:09:10.573793Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/xm/1613786513998262.png","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.144Z","timestamp":1790179686144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PafVxWHlqRBfwwzk4H6%2BW0hf2vDIcOdRRxLRm2%2FJ8UBI9xJ8tr53uOMtkXMDPm7B48jf5ZaAoDzTLa1QVAibqQudWPcYOcluBof8IXlE4LCXaKByYXZDK8cG6rg%2BYS94p8KyJNXI0viklzg%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Jul 2022 00:20:44 GMT\r\netag: W/\"adc-5e303d2c3af00\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e69080b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":3536,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-09-23T16:09:10.57462Z","times_seen":26085,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/xm/5fc.png","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.145Z","timestamp":1790179686145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBWq273txzyFzZ5KNMhFv9Trj3xCOI%2BXzXgWXycMB5sXskJH6tByIrKO2sAc2s%2BzegfYl%2F50Fec8QfS%2Bp3xxnz2hq1lnke4iFgyzAfOy5rK9Xi5DYVRdStoVPE235IOjZzYSo2jL5tqUy2A%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Jul 2022 00:20:44 GMT\r\netag: W/\"a86-5e303d2c3af00\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e69090b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":3440,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.575235Z","times_seen":22934,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/IMG_9A79818559E6-1.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.415Z","timestamp":1790179686415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/IMG_9A79818559E6-1.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/Public/Home/static/css/base.css?v=1\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ2zG9AY3c4TtVHKW%2BdYbjlnrtTLWppcYR%2By25Y3ZEz3Z1cRaZ4ONhE3d3SSeynNF5iV0ScNSqedhtYNKv3kcolrtOiTuh3dpCc2Rp84sXtfdT5PCsxQXBLZR28G3R2Z69jr6zu9OvdHwVw%3D\"}]}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 18 Jul 2026 23:00:24 GMT\r\netag: W/\"9f32e-656eaa36cc662\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 501\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face6019240b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":652078,"size_decoded":625103,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1000x562, components 3","md5":"78855227f8b39827217d9205165dcf6f","sha1":"866a3236fe16291a9661a8a8619d1ac5ac74be7b","sha256":"15a7eb9265425027680296cb3c46c605b5cacac243661b62b687dd3f5de68d01","sha512":"27e0588ba2dd69f96ef39d02db0fffc02dec0dd3277b0f968f0659dbd081a42309e9ed963759036dca7e64e174b548a48b7543c0077b68830822445e3b7f91dd","ssdeep":"12288:+MzBykPBJVgcNgAERoglyqhkgCY32XKuNFMqJctwWehG6ozEPFCLKFw6UE:1BBPHucN1qTlyqd26MJyiGmMK6E","tlshash":"f4d42238ef42d4afbe4d1050d0d78adcb7539674b2e4350162110ebbfbe86a759a342b","first_seen":"2026-09-23T16:00:46.102364Z","last_seen":"2026-09-23T16:09:10.575918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ldo.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.132Z","timestamp":1790179686132,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ldo.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mfAfemjjFUq6XBL+ajT2MyGg9+ixPf2ohFyI/lOIBHWh9RiPaY+0XBqG9qNULJ/w+rUJCPehH04=\r\nx-amz-request-id: SG1ZE6CF82NW0GNY\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Fri, 24 Jun 2022 08:52:07 GMT\r\nETag: \"e96c5eff78a00624036664f948de0cbf\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 60760\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":60760,"size_decoded":61122,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e96c5eff78a00624036664f948de0cbf","sha1":"fd60ee0a09ed007cf289ca8ff1e6ae5e67a463af","sha256":"6de2af4909cc4a54a8d6a468837af4b7c7420b896f4ffb456330e7f7819d83fb","sha512":"79a3ea44093e6de48c875b69aaa489ca70b3cba4dda3ea8e08f4c99086d93260634881f6cdb54050877b4e739dc29e3c835837c5b5dbc864d1e7849c9d848cba","ssdeep":"1536:Ye6ZQRbpHJolIKNt2zgaXhXq2iIxfdJaAryV7NiXfe6gjcp:Yhud1JolINDXqhKJFr276ngAp","tlshash":"8d5302a0a5df3c209f7a073fc376015dd6d1a64ad0ff0d1229b93bd1b520bba2e60599","first_seen":"2024-06-09T14:45:45Z","last_seen":"2026-09-23T16:09:10.576608Z","times_seen":455,"resource_available":false,"data":null}},"time_used":8906,"timings":{"blocked":198,"dns":0,"connect":257,"send":0,"wait":284,"receive":1544,"ssl":6623},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/op.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.199.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.137Z","timestamp":1790179686137,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/op.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: W61Cx99G+GlhNa1meN+3o66O7rZ+HB0eD6mdjCdnKWbM8Grj5bBM4SErNkwrNwB0W7UtHTQ9bKk=\r\nx-amz-request-id: SG1XH9M48X7QV14V\r\nDate: Wed, 23 Sep 2026 16:08:14 GMT\r\nLast-Modified: Tue, 31 May 2022 15:19:45 GMT\r\nETag: \"80c36755ff62eb18b79650ba374be6cf\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2129\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2129,"size_decoded":2490,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80c36755ff62eb18b79650ba374be6cf","sha1":"16986d7a0f8432e71c1a49c01288e2772a5ea161","sha256":"1d22b19ffd6e76c9e2ff0223eb94ec0c349ec3c9373a820fb86f25c23b54df06","sha512":"8747b7b9592747dc394b9b8cfb7e97fe8674263efca04bcc568493fdc73c5a446c1e53b1016b505f4f2ff5af8f1bde72b4577acf9d0e2bc7be9b643b1495c922","ssdeep":"","tlshash":"46415164a3adc120e011b6f49b1da8393ea32dab3d13985b87e71851a6204be16f08c7","first_seen":"2024-06-09T14:45:44Z","last_seen":"2026-09-23T16:09:10.577228Z","times_seen":420,"resource_available":false,"data":null}},"time_used":7414,"timings":{"blocked":195,"dns":0,"connect":259,"send":0,"wait":285,"receive":0,"ssl":6675},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/img/photo_2025-06-15%2021.55.11.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.147Z","timestamp":1790179686147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Static/img/photo_2025-06-15%2021.55.11.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIaUcFk2uM2ITXjURHT9l%2FlHiilB4HYQbW74nHU5x%2FqjZGFjdiquYsDovBm1lKNuSJRvEcrJZrOS%2BL7J0pFNJ%2F390XGH2CFleGiRNSrDLAVa3CRp2p40G9qdQdQUENArS6KffOvRwUHf9ls%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 15 Jun 2025 14:58:20 GMT\r\netag: W/\"121d8-6379d828dfb00\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 501\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e690a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74200,"size_decoded":74336,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1148x587, components 3","md5":"83dea1d163c884ac649053c085509889","sha1":"31dd2af3160d67499ff593b9c5fa1ad9ee795ea7","sha256":"771b77176756c4aa9b398809cf58805b70793ffe43819bdcc3ba1066439f9a8f","sha512":"26f6b33273f243eae7fe6fe4e5810cab11e5d88de3549a08b548250e1014a0a8bfde98135292d9394a1220ca70848959938818c19d805ff537c55c48d421b3cd","ssdeep":"1536:op+fM5/64FXqNoRUOrYAiC3I4w8gWPLdcxOwlg9S:oIfM5yUXqA0AiC3NL4OW","tlshash":"27731264924a6c4cd7e8c4b9eaf69fdcf4774ab382f49100b110d18164e5128f9eeebd","first_seen":"2026-07-05T16:59:45.753594Z","last_seen":"2026-09-23T16:09:10.578584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/imgs/icon_margin.svg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.148Z","timestamp":1790179686148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"654-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7O%2FrPVPrekjgtEIk1wG24MsN5f4%2B3DucwXprZvGk4te5KMPYZxOLxetoHxpc1Cm6lX%2FFKQUK%2BPQLwLJ1AukHGwadPhLKMq5WwR8AY8mhwiZvHDsSfD%2BUWenSdy5omcVL0uPhPreQBJbiAFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e690b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 779\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1620,"size_decoded":1596,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"283d6ddfb29042011328571a509df448","sha1":"3e486c50cfe119efc43c68ffafa349670c9f919c","sha256":"e88581cf4375fb6f9e7d94b4f9df4a667677d0d96384227c9a9228b1329f3308","sha512":"78e85634891dbc1423281f54e43c362b9cf8c75c83a070c34b36676b72b7b71e7793b2224c6d820eb870a0f7d854b336334b8ba0bca9125854139aaf2a97bc91","ssdeep":"","tlshash":"4e3120883a7ac39ce500e7ad981bb5ac3e1e04e96684c5d9c3e22c1078d2a59dc98dd7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-09-23T16:09:10.579326Z","times_seen":5005,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.196Z","timestamp":1790179686196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"2c9e-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHx90s6aHta4XuFRiBGcbs2nk3hQKqVjNWy33mQ54uGEQTot69ZAe6Yvo5mokglNNOnkiNrRN6QTdTEalW8zaElDl2FYb4QJCxBjDUCd1YEosxKGrIDzEWV%2FQFcMVKV4Z3k0lb2H66ylpaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5eb9120b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3700\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11422,"size_decoded":4516,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-09-23T16:09:10.580521Z","times_seen":17408,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Upload/public/6a26dd6f49dab.jpeg","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.127Z","timestamp":1790179686127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Upload/public/6a26dd6f49dab.jpeg HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaUvmhyZW%2FssXNyoroTfr0DyHnFuwaRLedCC5iE5UUKiV%2Bzl7s8ov9lbIFu5cry7ii8JP4gUdjvnOQoTFFxM16e9%2FGWZyj8jbdXTSN6BkrirLzXTPeqJNjPI7xayS8zDMRUFTCg9%2Bw9n6Cc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Jun 2026 15:19:11 GMT\r\netag: W/\"20513-653bf884ef9c0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5e49010b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132371,"size_decoded":132405,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"6bafcb2d47bb68a3ab21d59522666920","sha1":"ad712b8b51f7681c92f001f03c99a23b6c9248a4","sha256":"3221d9351eaf06f689cb4a5492599d88390650cb550b7833781144b1ff2172ab","sha512":"336b64b2fd1840152d031e531b80a05908a6351fa2ab2a8a4101627e28d059d50562807c5f02fd8c1ff731fc87113242f01c1b360ef9aa03244709e3db4902a0","ssdeep":"3072:BQ0spaRy7GEyU/FzurhHzh1ijVkEtq5m8wFA75n3HxTDm1vOzD:B5Ry7GXUturhThgCEtP8wKNDVP","tlshash":"2bd3127d7a5ea145c57c42b6bc939fcba2c61fe890053c3319dba2b158f62d47b001da","first_seen":"2026-07-05T16:59:45.721322Z","last_seen":"2026-09-23T16:09:10.581279Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldbalgoldexchange.asia/Public/Static/bootstrap5Slide/scripts.js","fqdn":"goldbalgoldexchange.asia","domain":"goldbalgoldexchange.asia","tld":"asia"},"ip":{"addr":"104.21.53.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldbalgoldexchange.asia/","date":"2026-09-23T16:08:06.198Z","timestamp":1790179686198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldbalgoldexchange.asia","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 12:06:43 GMT","end":"Thu, 17 Dec 2026 12:06:42 GMT"},"fingerprint":{"sha1":"B1:FD:94:0A:94:1F:13:7D:FE:CA:E8:D9:DF:54:31:E7:91:99:94:2D","sha256":"51:7A:3A:22:FB:56:93:61:61:46:01:CD:1E:24:F4:F4:6B:CA:F8:EB:EB:B9:49:04:F0:57:C6:43:80:88:C4:C6"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: goldbalgoldexchange.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goldbalgoldexchange.asia/\r\nCookie: PHPSESSID=vimv0l66htpmbjh1epb0trgb97\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 16:08:06 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 29 Nov 2022 18:06:52 GMT\r\netag: \"12a-5ee9fda3a0700-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OWkwos1hUYW8QmFMg7iqyaBrgQnrq9cyargqJxwkF7H7jMN%2BwAzgHQHGQ8PCI%2F2sbbbi5GwZ38OxrJRdlcQK6hJAAlYxT%2FzeYb7WIeB6pY4adaS97n98gFsDLknSSAgJl4DVZ6vMeOh5Yk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3face5eb9140b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":1035,"mime_type":"text/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-09-23T16:09:10.582562Z","times_seen":8593,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"goldbalgoldexchange.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}