{"report_id":"c471e36a-c9c8-4124-956d-18b9ee8fb9a5","version":6,"status":"done","tags":[],"date":"2026-01-09T02:04:45Z","url":{"schema":"https","addr":"exavo.top/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"172.67.221.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exavo.top/#/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"title":"exavo.top/#/","dom":{"size":60193,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27664), with CRLF, LF line terminators","md5":"8dc7c276cba6f21e624d54779119808d","sha1":"fd9201c68091e235ea7cbb8163ede551cfdd6b4b","sha256":"5d9bcb9c2f643df04b114b5f50a15b9c8dab6cc788b00eae7cd2d99da5aa0066","sha512":"2bfa2056f9515780c18528d3aa39f0eb1abf05eb5b625e909eea19f07f49f02bb56ea5681aeea4f1a384856b36c64c39e175f05053d51fcaf2c0aed5ce969c2f","ssdeep":"1536:OF60wOE7EBKjp8DSqmfV/8DSqmfjSJBQSJGoR04KzGu9rWqZSmw+QqgP5ZArmZ5+:G60wOE7EBKd8S87xUp","tlshash":"1e434f3876433863057b98d0b0e45f09b2a39b3ac2254254b7fd236a77cacf16e563e5","dom_hash":"domhashe0edb6359d1b52852b32f2af1f9efee3","first_seen":"2026-01-09T02:04:54.325934Z","last_seen":"2026-01-09T02:04:54.325934Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exavo.top/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"172.67.221.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T02:04:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":5,"received_data":16053,"sent_data":2314,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-05T13:13:41.270215Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"exavo.top","ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-01-09T02:04:46.94389Z","last_seen":"2026-01-09T02:04:46.94389Z","alert_count":72,"request_count":36,"received_data":2275499,"sent_data":15964,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-01-05T17:50:11.995743Z","alert_count":0,"request_count":12,"received_data":296834,"sent_data":5402,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exavo.top/#/pages/index/init","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a75ab93c4db9073c13fb419ef7c2c46a","sha1":"856072c405dfaa708e23622cad35d78372e23f07","sha256":"da656c2f3889dfb9eaeecb26f30c2b5ff695b991d6c5fbdd8f8978fc0ed2907e","sha512":"0dd74743f8822d86d634c325d0f3f6148960d7c9ba0cc668fde3cfe6475b7a0ffa5ab23cc7f229fd0313dcf0d1d427c60df140423c158354408f96f86faba2bb","ssdeep":"","tlshash":"cec08cc4a0e62e601a02692418af28e8a0248026b45cab02add4d8482ee34f48233e98","size":149,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.740458Z","times_seen":1138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"437794e6e5838d19ff9019b684a23912","sha1":"015679bcf286fccdfdcc59157de255c052e75a69","sha256":"f7e92672b8004e2f40d7a0fb2d6ff907deeffacd4bf8bca53190d570a5ab35a5","sha512":"e6fa5cfdfd535613371d955b9b03b9a14c37e33a4b171c3d17f90adf917d0664961fb6ea9344bc27777eb9500083acab12a130551aa4277f55f219bdb17f0d8d","ssdeep":"","tlshash":"6be061c250a7295c0520816a355ec5131f6505739e818d513c8c6765cff9e4bc06d858","size":421,"data":"","first_seen":"2025-03-11T08:52:08.619783Z","last_seen":"2026-06-02T07:26:04.061512Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/index.7aa97607.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f371976d6bf909df80756cd0081e8d3e","sha1":"f3ed1008232201ee1e38f6af2f2d35af1bc0afe5","sha256":"4d89de9befc7a031bbf2e17847037bfc06ad34768ee7763258b5ec1376d27e5e","sha512":"79f785d99ce575b6ed8e06416a552de1841b0339daf098d1cb6e788f4375ba712aac39e516b970553222faa773e4bb13a0ee19b09ad52f473751ce58d4ac5f7b","ssdeep":"49152:uPj4wJB/SDJ10XvQbJADwHIthalJcrLTsFXrJFmEQ2x0rxG4hIV6uAUrbm+N2lZg:u7Y","tlshash":"a975c6c6dafa580e8be4b055f9783d8e1c4059c0e818c3baac7d59f7e7ca144979236c","size":1649711,"data":"","first_seen":"2026-01-09T02:04:54.362931Z","last_seen":"2026-01-09T02:04:54.362931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/pages-index-init.5a42133b.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9b4e9cfda2a8b0e1fed61dc6e5c4345","sha1":"bf1e652b1c1a7d67361f20fc24721fdfda64e705","sha256":"efd3e775b2b485076d88bee589c47f8448d407febcf6f196502f104780f8a50f","sha512":"3ec85a673325be705d9f05c9e92a234cfebbcd6dd1f796166690060a15d68c9fd05e324a374cf261ad50aab2f38b9ba02fdbdca4e3182327adc487c4eeba536c","ssdeep":"","tlshash":"f831774b32afaa766f721847f5fc2c8847b21b841c32f4cd7e6a5c1958f2d89088d321","size":1495,"data":"","first_seen":"2026-01-09T02:04:54.345472Z","last_seen":"2026-01-09T02:04:54.345472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-segtab.b7e3d6a8.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8a6ea9b8eecd5d22583e2ec63058f145","sha1":"2d6dec581559223ce7ee26a75f64a7653eb09551","sha256":"315d2e8a3ac8980f31ee8718d900f95c6883bd813f6f2e1d39fa83777fd0c09e","sha512":"2b2c1fce652127840360a54c8ec72abaf0b5e1157d90ef3f5270e1cb7d23137ddac0b9845a389a2fabcb6c38ce99c817074907e5847ad14cfa208087ec6871de","ssdeep":"96:OvHXspZgoBReFcJdnGW00LggbMiY4FCx/PLt+pixOwCCdcbILzJ3Cuq9:UXaZVwFc3HzcG4/PL2OyIJyuq9","tlshash":"47a1d878723ca83d37bb4965b07251815209cb9fd739a0d271e8047552a2dc45addf2d","size":4742,"data":"","first_seen":"2026-01-09T02:04:54.350764Z","last_seen":"2026-01-09T02:04:54.350764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-drawer.c85ff373.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"194c81baee248e4d81976602a908cc2a","sha1":"eb077dc8fa08842c9ae0d391805e10e8f2913c67","sha256":"8306151d1493692316e3aacac1971d114f8ff20718c23f378810bfa622961a39","sha512":"d7146a98e101f38dce0e054bb776fba74360fb98b9ac54a607b96494b4fd7d2fe2e5216cab9546f943521b986c45d2b0f59c0316a844043982c849e6ff1ad1e5","ssdeep":"96:3OvDpw3F5RUtxr6SDZbCzQrcQw2D5IWW6iQ/IDu/PXmVWaNmz1Xl5o+H+g:S1emBNoQwoP3aNmz9g8+g","tlshash":"aac1c798746e2373a6b709a5c072480d133d1f5d997876c1f2e2293a36f6d484dd8bb8","size":5674,"data":"","first_seen":"2026-01-09T02:04:54.344215Z","last_seen":"2026-01-09T02:04:54.344215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/pages/index/init","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-10T05:13:29.738728Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/activity.1a4e9ff6.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b3b44025e6bef23f8c919a5c1e05f383","sha1":"fd651af4d7f1dc906ad93ceb2dfc350a3a34381f","sha256":"5b6f16d5bb4d370e2febec42953cf6ce6b20598b93b50c50edfdc52eb81717cb","sha512":"e193c104bbeff9ce1bd16984c638c73391a2fadbd2d8ada93f5eee7da2d9d4ea0ec8a3c0ef260a02bf5676f06784c3ad10245f10d707fdb0599190b99ef2fcdd","ssdeep":"","tlshash":"b2e0262e2114f7b38a020097805e6a43a317ecd00f0a86a0ae0a134c3ab21ad87fd46b","size":319,"data":"","first_seen":"2026-01-09T02:04:54.349351Z","last_seen":"2026-01-09T02:04:54.349351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-image.9e9363dc.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8ace3931b497e1618c22392fdc89cb27","sha1":"018217da2574f9167e3a35ac3e3775bfe20f5631","sha256":"7ae6d27c696e02bbf7daaa8950bfea9387e9c8934947fcdffe4cbe220ee6de5a","sha512":"7b32f4629b77b08fca20536718e997fd958e3695c2e3b23eb66b1ca7842eba953c198b750bce824a7eea70744abbf6e28c6552f0a135b287a40d2237dc86b3ac","ssdeep":"96:gcxpkON2VYyRTzmxmMRSfzHmt4apODtUwfUNBAlAIgby1N:gIkXmxmMROzMpOu6UNBAlAsN","tlshash":"3a91b53c31bdd93f69fb45e9a055994a44459f2ceb30b7d0bae140aad1aec840229f3c","size":4227,"data":"","first_seen":"2026-01-09T02:04:54.337043Z","last_seen":"2026-01-09T02:04:54.337043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/pages-index-index.7cf21931.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3a43cf3c11433ce7928cb85c9e3036","sha1":"1f221c0995db664a8a45b7b29dd1c01c8582b7c7","sha256":"d100607320744f58507b50f2cbfccd0893cf8c2dfb07dfde52f5db9f0d0e2d1b","sha512":"77a52dab2d3139b508dd82b18bb9a147fdb90f8d676f8fc23c4438ebc03265d611bd404fdc1be983f03de0f89a661a3a97f3b3c39bc93f0603c637f81c8c9eb0","ssdeep":"768:uHZnBMB1JkDeR6uWDvddhhrJAP5cq8DSqmfXTmJOf+XzC2DyORpqaMJXqpkpm+A9:XR6ugrnMj8DSqmfXSJrzCcyapqaMUpeu","tlshash":"8d137bb2b55c9e7ea727585dc860080131dc4e8ea219f680fafedc3523d78445de97b8","size":44315,"data":"","first_seen":"2026-01-09T02:04:54.3543Z","last_seen":"2026-01-09T02:04:54.3543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/pages/index/init","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d0663d39d873f0eb6f219b0801c983c","sha1":"2da20244f55d5a15a7a0695b8fd3dcedad9f3cd3","sha256":"67602cc36eb6e60ad520d10b21efd241ce5e573e9935a6901302dcca11f36ac5","sha512":"77e9b49e9a35d6d792ce3cb1b552b1c44ab4ae81a5ad37b9149421dfee57450e0346d0cfed0b1c131f2d050e3f69153fe1bc1da2848fd0351dfba6f15fd1e8c2","ssdeep":"","tlshash":"02c08cc8a0cb6e001a02665015bf25e4a034402a70489b038c94d8482e230b0a233ea8","size":143,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T19:13:12.551806Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c2bd803183c9eb6ccac9978d49fa819","sha1":"224d7d7beedd5b01f1cb107495ab1f2e5bf078d2","sha256":"7117536f358653602a49d94190c1371644f9cbfe936b0ad9dcedf867aec56daf","sha512":"718f3f630dd7beed360640387b56117d94ab54b03104530983d343c4ab6b02f51a4e1b399cd9532870bd4923c3f3247da65edb90185a7ee926e4b38e89f090f8","ssdeep":"","tlshash":"cec02bc5b0c33d002602a81021bf39e490344027704c1b43ccd4ec483e230f08233edc","size":135,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-08-10T05:13:29.738251Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6db6ac15339e58de97d8d22aec944a2b","sha1":"3b0ba47693be14f9a46402a4beb1c28940c20156","sha256":"53168f253d02b1350bf6325f97d206ed8a5ba3f13eb4deec32d0055bbbaaf629","sha512":"bdbd0f0317bafa782eaf1e3debc4ebc60248d3784840c1c12cda5b3ce7b9cec50be3a487fb81e1486e1dba36243e9a33a44d0f5a9ed10bb267e7f61349c0e5a2","ssdeep":"","tlshash":"16c08cc4a0c26d002606691010af34e49024402670485b028cd4e8592e330b08233ea8","size":138,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.737123Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-app.1d1ee7ff.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ee7543eabd900dffa14df11c30f3e88c","sha1":"e68094ec81634711e3acb83220c551203ff31314","sha256":"f6054a62a801cf7678ab3a1c6ba190d908652d1fb80af818015fd43ccfe784cb","sha512":"f60b77b7a64cf4f90f5e988582463169baba0bff241d2d437de9879b491809f3a86603ba199faa14aa1df1719fec23d06214aa727b6089a542d0202422126359","ssdeep":"","tlshash":"4f51753d31e9b27c623746ce5476574c184b776d4a326bf6d27a78703080c68725fb68","size":2643,"data":"","first_seen":"2026-01-09T02:04:54.342517Z","last_seen":"2026-01-09T02:04:54.342517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-tag.3016e579.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b75143323409b39de30f4984dd5140f7","sha1":"8299e41894e78db206d80a7cf161070f41817843","sha256":"ee2b2e782cdf7bea238a2670e4bc6305d37e78aafb99dd7a738ad199ea5745ad","sha512":"454d6bb7f7fbd0c21900a554fdb3c87175eea44574e6d38504dc93bb4ab885eb78a204f80b57f37719e18b82365651be2c9d56ec84f878f540a279909e16900a","ssdeep":"","tlshash":"9f8167b43d1448f656ff46cca172ae0d4929256eac357ff2f5a111245cf1915b04e73c","size":4006,"data":"","first_seen":"2026-01-09T02:04:54.343271Z","last_seen":"2026-01-09T02:04:54.343271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7e98f35f23795ecb1a944bbefa9e40a7","sha1":"9f6826623e1d677abe50f4755523c8986d229bc3","sha256":"2f34fa8f7eea8ee00070214da3db09639f6d9b89111c8ca090fcf04954be6ed3","sha512":"7cf3f08fbd52f6a4f645721a24b3d1cabfe28d13473087fb0a98eb47438edcfe9fec95d4b4ee73b2f4199e8f896e8f161d1a10175c400ee88e1d2d030dfd17da","ssdeep":"","tlshash":"8ec08cc4b0c26e002602691415af28e4a024402671481b038ce4d8582e220b08233e9c","size":138,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-08-10T05:13:29.73613Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T18:35:24.41579Z","times_seen":923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-button.a8c7e275.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"499f296f70663783fed0e82290fb82c0","sha1":"e523fc2cf2f276028d1de3daad26d019e1a7e7c8","sha256":"7d7e54a45ac316598fe9427dffba23fafb7816a4c5ccc2169b344b2f70024258","sha512":"5346f7e46809bdbeec01a9547a496a6bf67f99e9d96b10ff051b358d0518b704d13633f6d920225977cb11da10078b3c842ce0ec5fa1fe9b2b85fcbeec1f0c3d","ssdeep":"96:Rg0pHUD//UusxzD9831y6MX6eA6l5+Vhc8/YFs2GXUx8TCZ8NAwNGgEknZ1Q3:uym74Iq6ClEApYUSTCUAwNGonZ1Q3","tlshash":"c5a1e8243179cdbb6ecbefd83054291225259b6ee53475d1fea4607a138b8e590ccb28","size":4763,"data":"","first_seen":"2026-01-09T02:04:54.340898Z","last_seen":"2026-01-09T02:04:54.340898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/#/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-10T22:14:39.494878Z","times_seen":7217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=SF+Pro+Display:wght@300\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=SF+Pro+Display:wght@300\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 09 Jan 2026 02:04:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":152,"dns":1,"connect":20,"send":0,"wait":19,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Jan 2026 02:04:25 GMT\r\ndate: Fri, 09 Jan 2026 02:04:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bfe3611cfd6eaa33321d7ef2e6040981","sha1":"ec890d6e69feaa28080a1fb0a205dc7b5a87714f","sha256":"f7a1adf3e107544e85325e212b9f2b7f9af3dc8f8077667fc4d0e5a4687e151b","sha512":"c3631473a78e91288b63c69703695ac8b6ffc17641e652fb18ba0d05da397888d9cf55e846aa5c90ba041c56dc89b492ae3900c9fb9b9a79bfd4869895f7ba72","ssdeep":"96:aOxMaNqOxMaXFZHOxMamOxMaO3vOxMaBOxMaBJc+uTOxMaNcNDOpaNqOpaXFZHOd:bNryfO3iExlONEhYO3RrxGx","tlshash":"eca18992002ba400ab971dc273cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-19T20:01:38.048041Z","last_seen":"2026-08-10T05:13:29.726762Z","times_seen":192,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":150,"dns":1,"connect":23,"send":0,"wait":21,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:28.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:04:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Fri, 09 Jan 2026 15:04:29 GMT\r\ncache-control: max-age=46800\r\nset-cookie: __uni__uid=rBEQVWlgYi2vv+7wAxWtAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-10T18:54:13.738025Z","times_seen":20195,"resource_available":false,"data":null}},"time_used":2140,"timings":{"blocked":937,"dns":360,"connect":267,"send":0,"wait":266,"receive":0,"ssl":308},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/index.d2fadae9.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/index.d2fadae9.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-52c9\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryu6NpCjWSKLZKIHEE9OyBERGYengSRRkYKccY5AP8cyHD8tHKUwxsAILBXeLHr8ipp82NAR1FmaqxJs0KGGLUVCj2165B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d265c1a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21192)","md5":"7da80dc8629d2c4b58cc451499f7c2df","sha1":"c893fd1f8280c21350b0ce9155f8147af9c4316e","sha256":"dacd4e0a24020df690d40e1929fb4a09d8bbce4ac3f9cf7fa49ee3f6c7c45b88","sha512":"d08ce04f8b8e39369e7e2a783115799c99eab0ed56d5b8133d8d30ed9d90e160192b31e4772f90c5011c7f7013668ca0d3d7f50d4f9fed021a683a701b07409f","ssdeep":"192:4T7JNRIFu4puj8sR0sn830P7RNFo717jNf8Ggc7wNIytLQh27CNu+Jf7JNdsO7RK:4WuPdjcMcP7uqu","tlshash":"97928138b80daa06b137e714a0d6976910b0b7bbb24357bc6361e93d9e470c63f279d4","first_seen":"2025-07-20T10:32:20.010834Z","last_seen":"2026-07-12T23:28:19.775617Z","times_seen":27,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/atm.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/atm.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pDZeIjxqn5X0GLmWyzIq8AyPyYvjXGGgJDirDJY5Id/P5uZrHMehPD+JiBPZtno8gZnL/GzsCFEPlvY+Qkx+M29goBXJKx47VC8KPMvM5jU=\r\nx-amz-request-id: KDTP7X3M86MG844D\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:26:30 GMT\r\nETag: \"0b936890c4705172570095a38a532012\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 57878\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b936890c4705172570095a38a532012","sha1":"f4daecdba818f6d7187901b7accd73d188057f15","sha256":"95038af84cf03b7daf573dbb74b594844a428d986aafaa2293b271cf4ffc7363","sha512":"03922b324bcd0a7a2a59b62cd834a9c4cee456065dcc0e1852243ea1574935e6bb31ada1b6611ccb97a562b8e3814f2d512f28ccea8a89117abf869f1960e45c","ssdeep":"1536:kAYRg7ma+y/kpJZ55TNGApnIPhb3t0TJqg+zYa9Li9NdKvg:BSa+y/IT5TNGAA2TggCY39Nr","tlshash":"5843f1f74dac9c5e083595c08aeceaa5ca80ec06135dd920adca9f5c0d50dcaf43a5bf","first_seen":"2025-03-11T08:52:08.557956Z","last_seen":"2026-07-28T06:18:25.069958Z","times_seen":183,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":921,"dns":0,"connect":0,"send":0,"wait":306,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/init.46f70d82.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/init.46f70d82.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"689ddbf5-9c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pts6tjlKmnuY23NE%2FeZWokBf%2BNkS6w1lAvh5oRGs7IqSu4VymsVaBUSj56JiqpSTb5bhS2Z1rTT7uX41jYBY0wx0%2FWnoov8%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bb05d26ac2c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f5bc673696be89f7cec571c977e64018","sha1":"d58e256201b6638c9c3d565c1f44350343cd8f66","sha256":"794ffb7f52558d182033ae2459239a72747e4d5c197557f80dc53d965873bcf2","sha512":"99fd2ef30705972bfae8f10808707afc008b58fe0d43c0dd5700e0e3724bb0c9e5692c2c3fa5b32d431ff6ed46f00ca2a1f282fbbd6d1f17e273b9aa7d87a9f7","ssdeep":"","tlshash":"a8c08c70291fa2508832e243f4cccd95b3fde506cb72650f1a88e88a81899dab8c8243","first_seen":"2023-10-21T14:22:53Z","last_seen":"2026-07-12T23:28:19.765067Z","times_seen":186,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/v1/api/config/platformConfig","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en-US\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRjgtaU9pHDh3cvNFNeFVEEGOBPq1lr7Py4hFlNcg5f5s2NXkkFw4FQ5KI1aYEEZcfvrEohPdsPjf4cUPXoOjBzahCD6j%2B0%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bb05d2acca356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4677,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8c6e6a3164808fe8efa0cfa6f624ed29","sha1":"fe11e0ae3734c15d901d628484e07c665329c62e","sha256":"ed5b23098788600f01ab9bf3c01fa377a3017abb9e1e156757785966fd52ebb8","sha512":"4a69a52c5582f4579d39dd15c7b871bbf334400dea96acf82f38ea5fa7a17e1c1b1aab2ccd0767fc0b43079ac4c040efc3111e86a35da7db0ceeaa320d2228e8","ssdeep":"96:vQ+Ly8Fy7l48e08zFg8LYFaUn/Ol5nnftbr8sAU5:vQB8Fy7l4Y8zFgtaU/O/lcsAU5","tlshash":"efa1f04c2322aff8dee005cf95d214140fb959d77986e18ecbabeca43da78907634243","first_seen":"2026-01-09T02:04:54.330949Z","last_seen":"2026-01-09T02:04:54.330949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/v1/api/config/getLanguage","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /v1/api/config/getLanguage HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0MBHVgRaT67iyXYUYUnKhEA9jS7JNDdpUgO8IMLXydmW%2BHxMbwiu7hXCFlcpvD0vxyYLNcsO34UG2Jik8v5PnDxUlcoRP6g%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bb05d2f1d1456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16034,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"70e99e1955d71aa308a78667ae7318da","sha1":"3587ddcf0202f24f1e708a8bfbf01213c89d3cf1","sha256":"39626c913dfde4cfba0b35ad8e2e25a60649880eba4ef90dd3dd1e9a0182480a","sha512":"3b096436dbd0a84d16402d787b8c1028af1c95db5fdbfc0c54d6287b987f8de03388b1c0c39196ebd6fa2a8c4bb8e3c5106ab44bf9b557ffd52707e414133c18","ssdeep":"384:ZqSDztN2mQPf+Qi6bt5zg5+/PYvdPPaqHtKRg:ZnDPrQUOt5zvPYvH","tlshash":"5272864fb20a1cb74bc71bd535eb1e0936fc20c3569588498cdea95c13eeaace26711d","first_seen":"2026-01-09T02:04:54.33178Z","last_seen":"2026-01-09T02:04:54.33178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1012,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: f/Z5YAI/1sbo5qB7Bm6URFaZQFYkZ5bD1XSYNUh4htDYtk8Wlis7CPlnAJblns+PAkuvBeXuB+SqcHAORnQHXA8YWebl0ZKJ4JR1bvO7CGg=\r\nx-amz-request-id: KDTR9WYEXG2T8A4C\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.722239Z","times_seen":523,"resource_available":false,"data":null}},"time_used":1876,"timings":{"blocked":788,"dns":33,"connect":277,"send":0,"wait":296,"receive":1,"ssl":478},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/index.3f4f1a61.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:24.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/index.3f4f1a61.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-5c9e7\"\r\nexpires: Fri, 09 Jan 2026 14:04:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9t6vXECbcmHWezXMS3V8rpEQ2ssayBS4ogmM296S0wTGI7K2P%2F3xXKaTtWV2682UVwXVt00jQzcw61CRSkM%2F%2Fjq0jpsGIuA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d1a5b4056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bddf258f97b33b8b1ef1b9dde33d5140","sha1":"0889713fac40b5d90b6bae176b82a07073972288","sha256":"672205cfffeee945d0d0579e49312142a2e7b1be088bcb83530df0d8e950005e","sha512":"9f13389fcd0b4e02195910b786b0f779cb71e21aaf5bd115f8f723341f22db0cd18c7ae9d26f88ca37913267efa4e26bed55f996f3e632d479f020a0bd190a94","ssdeep":"3072:PDnvQTikh+GyK1ZDTasX+5w9szMZ9JVFr26L:7n3lGDd+WxZ9JP","tlshash":"db84b49e6e8411bcbf37d222d7a6a7ecb13cf560ee41c59af14325288ec37f60512598","first_seen":"2024-12-26T21:19:03.904115Z","last_seen":"2026-07-24T05:21:13.353202Z","times_seen":212,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":448,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Jan 2026 02:04:25 GMT\r\ndate: Fri, 09 Jan 2026 02:04:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70f6f56be7ff7ace3e1f9979aef5db75","sha1":"3247717a7c2321db34762076775f37f8adc1e6e1","sha256":"ce53fd6ea2c59a3106afb0cf49f27a403675291622352c323c04ab5cc642a321","sha512":"b2020165c0c7b5c32c97d6b62bac6666d9b7c895ab837dca8272334ac3cdf164030e1780f80461b602690075ada4f3e836a4bea1505532b3bd6f281cc110392b","ssdeep":"","tlshash":"2d219791087bd114ab871cc523ce6d37ee0e9251b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T08:48:26.697017Z","last_seen":"2026-08-11T00:27:10.610323Z","times_seen":6602,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":148,"dns":1,"connect":22,"send":0,"wait":20,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/static/images/tabBar/order.png","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /static/images/tabBar/order.png HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 623\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\netag: \"689ddbf5-26f\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FiCo4mTZFYBmTrbInh%2Bu2lSSKALV1DHQo7WkCfUoPCj6RQ%2BalQwGrRgPm8xXyjYOXS%2FNbxOw06GBa0TTr5w146bnUSkn8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bb05d263c1356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0897c7b0cb2bfbf9634a00807a6de57d","sha1":"29ba0909b568033163559a19b9d7f7325730622f","sha256":"3e8fee8f371d7d34ea9eb22d7597d2610ae85e333bd6231a625c2e72e7c9c349","sha512":"f1f720b73c149444d49e959cb95c650458a881f5670f52b59c8a34c2a069c0b706efe863b7ec1cce7f29364a234fc95766966b0545b373c7421cee186c0bb0a7","ssdeep":"","tlshash":"0bf0b7ea76a858a8ce3104fd15068c34890c15b03b8899ff2e793a144242a242c5011b","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.730223Z","times_seen":295,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-image.9e9363dc.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-image.9e9363dc.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-1083\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75ZSkYAcaiy75K6Be6x8C8gTu7uYn2VvOSBhnChM%2FYEKtKz5%2BB%2Frco%2BB7PuC3%2BE58nmLoW70eWXsaZMtqB8lZ%2BNqWiGl%2B80%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2bacc056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4226)","md5":"8ace3931b497e1618c22392fdc89cb27","sha1":"018217da2574f9167e3a35ac3e3775bfe20f5631","sha256":"7ae6d27c696e02bbf7daaa8950bfea9387e9c8934947fcdffe4cbe220ee6de5a","sha512":"7b32f4629b77b08fca20536718e997fd958e3695c2e3b23eb66b1ca7842eba953c198b750bce824a7eea70744abbf6e28c6552f0a135b287a40d2237dc86b3ac","ssdeep":"96:gcxpkON2VYyRTzmxmMRSfzHmt4apODtUwfUNBAlAIgby1N:gIkXmxmMROzMpOu6UNBAlAsN","tlshash":"3a91b53c31bdd93f69fb45e9a055994a44459f2ceb30b7d0bae140aad1aec840229f3c","first_seen":"2026-01-09T02:04:54.337043Z","last_seen":"2026-01-09T02:04:54.337043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ltc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ltc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Wp3EIPCi/+HtALQX9F5/99w9KnejV0mgER6dVqDdJwaYZSm8Mq5cyGfQQHVpGQzE9Wa4c+CRXDIz8bioFNBQ7ua0fKAuapjRjkbWDP7XzWA=\r\nx-amz-request-id: KDTHP10Q5172E99A\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:04:10 GMT\r\nETag: \"b772bf1738628de70f1b9304c3d669ff\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b772bf1738628de70f1b9304c3d669ff","sha1":"db4b8dbd617a80bc2b7efcafc1b93064eb9a08bf","sha256":"9afa8bc92c0b1ed443e1b75a05bbac5399cc3a6c95863765b0d68959faf089ed","sha512":"2c54b078c370b434455c91a7a61454bc4cbc3ab611793db68dc733087aa507a280108d53977a1a47983a7161b52cea75d097c6f6bee8c529774fde42ad2c7516","ssdeep":"","tlshash":"f8f02e7df6441b35980ed634663e2cb430352fa2f245805a21dd1a547a574ea5945363","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-08-10T05:13:29.722789Z","times_seen":525,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":1067,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/uni.5fb1126b.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:24.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/uni.5fb1126b.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-546d\"\r\nexpires: Fri, 09 Jan 2026 14:04:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eknK2H8GdsnfwKh4aSi3UXjpuK5vaU7vKdKa%2BCcaJEnkJbujizbR8tjIuz2e2pzCjIyoYAnejZGXWJ12GRdIJrZaulgrvok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d1a5b3e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21613,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21612)","md5":"b1f9cc4548535957de552344507b19d8","sha1":"e8309e207e66bee8b18e28acd860050567e6a610","sha256":"5fb1126b02d537150d8d1370479b914f182e0b77f8c047e98fc3f530753538bd","sha512":"379916ec53ebcbadf76ff737cea252ad2f9c300bc00d50adb5915895820eec44afa4ee25b2bfc85f9fc2b52d60704baa3786d217a50047fd67f23b183e472cc5","ssdeep":"384:GRl8TQXpmL+LyZ1Hgv1GVM70PfDcwp57fh+:TQsZ1HgTYnDcwpe","tlshash":"92a2a6316a012a3df867ca2969d1db8f2231c4b3d9a31f1deb7575248b9e4c9193e3c4","first_seen":"2026-01-09T02:04:54.33986Z","last_seen":"2026-01-09T02:04:54.33986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-button.a8c7e275.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-button.a8c7e275.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-129b\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDyh70ySWU3VapRusaYftbVY5cgPNtGg7hlQOho4WQFBaxv7aR27pWuX9EQVaL0v1xxd49useyUWlRIxAMnEwq4M7z4uskI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2bacbe56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4762)","md5":"499f296f70663783fed0e82290fb82c0","sha1":"e523fc2cf2f276028d1de3daad26d019e1a7e7c8","sha256":"7d7e54a45ac316598fe9427dffba23fafb7816a4c5ccc2169b344b2f70024258","sha512":"5346f7e46809bdbeec01a9547a496a6bf67f99e9d96b10ff051b358d0518b704d13633f6d920225977cb11da10078b3c842ce0ec5fa1fe9b2b85fcbeec1f0c3d","ssdeep":"96:Rg0pHUD//UusxzD9831y6MX6eA6l5+Vhc8/YFs2GXUx8TCZ8NAwNGgEknZ1Q3:uym74Iq6ClEApYUSTCUAwNGonZ1Q3","tlshash":"c5a1e8243179cdbb6ecbefd83054291225259b6ee53475d1fea4607a138b8e590ccb28","first_seen":"2026-01-09T02:04:54.340898Z","last_seen":"2026-01-09T02:04:54.340898Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/static/images/tabBar/asset.png","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /static/images/tabBar/asset.png HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\netag: \"689ddbf5-2b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K34ZMo5uz%2BGJJZzRYuEKy7uKIVC6CHMEvIXJEtLZyDq9TbTo4ewrnRXjJXNrYaYlP0%2FOiN%2Bxvo6xGJ4v3y5SReda9wDl3Pw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bb05d263c1656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c060f809b640e3037ff4b3acb5a80907","sha1":"f568594ca7b19224a846bd594f1c5e9e1002ba44","sha256":"9da1253a1c8a7153cb6568e7d3082dbb432e5a7662de8ee47507b0d7be9e32c6","sha512":"5ef880d1a924ce1474e6c1f68e7723ef4472fae08dbb4ed25561568f0af03cf89753648664315ecda8da9a173dcfe5dacf027f6f77b1ce810eae2b390f9bfa31","ssdeep":"","tlshash":"a90144dabcc2a0708aba3ca9595f7875ca92805811229f854b4998263a40b9cdd461c9","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.721702Z","times_seen":268,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-image.9e9363dc.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-image.9e9363dc.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-1083\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtXBfx273thcA%2FwmwaTGaCXvtviGNRW1c9cSraLx50MGHPheIjaZFk9g5MALIUNoCX%2BJveQ9nnU8g7ib6IsJHonnnIY7YRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d268c2556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4226)","md5":"8ace3931b497e1618c22392fdc89cb27","sha1":"018217da2574f9167e3a35ac3e3775bfe20f5631","sha256":"7ae6d27c696e02bbf7daaa8950bfea9387e9c8934947fcdffe4cbe220ee6de5a","sha512":"7b32f4629b77b08fca20536718e997fd958e3695c2e3b23eb66b1ca7842eba953c198b750bce824a7eea70744abbf6e28c6552f0a135b287a40d2237dc86b3ac","ssdeep":"96:gcxpkON2VYyRTzmxmMRSfzHmt4apODtUwfUNBAlAIgby1N:gIkXmxmMROzMpOu6UNBAlAsN","tlshash":"3a91b53c31bdd93f69fb45e9a055994a44459f2ceb30b7d0bae140aad1aec840229f3c","first_seen":"2026-01-09T02:04:54.337043Z","last_seen":"2026-01-09T02:04:54.337043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-app.1d1ee7ff.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-app.1d1ee7ff.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-a53\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCVrwWfvAkGfabDzyvkylMqHEdn7kc5QAhQ8R4Bn5T3iSWE9EDvNJ5WyiWYWymj8qZq4r1HK3ltdSG4kR%2B7IYop2dmO9908%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2bacbf56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2643,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1999)","md5":"ee7543eabd900dffa14df11c30f3e88c","sha1":"e68094ec81634711e3acb83220c551203ff31314","sha256":"f6054a62a801cf7678ab3a1c6ba190d908652d1fb80af818015fd43ccfe784cb","sha512":"f60b77b7a64cf4f90f5e988582463169baba0bff241d2d437de9879b491809f3a86603ba199faa14aa1df1719fec23d06214aa727b6089a542d0202422126359","ssdeep":"","tlshash":"4f51753d31e9b27c623746ce5476574c184b776d4a326bf6d27a78703080c68725fb68","first_seen":"2026-01-09T02:04:54.342517Z","last_seen":"2026-01-09T02:04:54.342517Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-tag.3016e579.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-tag.3016e579.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-fa6\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8qwu8iXpFtck6vTkQWieCumY2Oy3x8V85VlBjTfF0nQGLazKeINyiqus1q4jMJ3FrSJYALq8HIiVWaVztHHHydIStQ9ddE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2bacc256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4006,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4005)","md5":"b75143323409b39de30f4984dd5140f7","sha1":"8299e41894e78db206d80a7cf161070f41817843","sha256":"ee2b2e782cdf7bea238a2670e4bc6305d37e78aafb99dd7a738ad199ea5745ad","sha512":"454d6bb7f7fbd0c21900a554fdb3c87175eea44574e6d38504dc93bb4ab885eb78a204f80b57f37719e18b82365651be2c9d56ec84f878f540a279909e16900a","ssdeep":"","tlshash":"9f8167b43d1448f656ff46cca172ae0d4929256eac357ff2f5a111245cf1915b04e73c","first_seen":"2026-01-09T02:04:54.343271Z","last_seen":"2026-01-09T02:04:54.343271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-drawer.c85ff373.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-drawer.c85ff373.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-162a\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OhLq9DW9ko6xIOCHIRVAPyre11t0BgFb9ly7IiFVDir4%2FhcxxGleojlA48s1Y%2FT%2FeEwHyZnowZkmexhY4GovPoUWwXyVpI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d268c2256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5673)","md5":"194c81baee248e4d81976602a908cc2a","sha1":"eb077dc8fa08842c9ae0d391805e10e8f2913c67","sha256":"8306151d1493692316e3aacac1971d114f8ff20718c23f378810bfa622961a39","sha512":"d7146a98e101f38dce0e054bb776fba74360fb98b9ac54a607b96494b4fd7d2fe2e5216cab9546f943521b986c45d2b0f59c0316a844043982c849e6ff1ad1e5","ssdeep":"96:3OvDpw3F5RUtxr6SDZbCzQrcQw2D5IWW6iQ/IDu/PXmVWaNmz1Xl5o+H+g:S1emBNoQwoP3aNmz9g8+g","tlshash":"aac1c798746e2373a6b709a5c072480d133d1f5d997876c1f2e2293a36f6d484dd8bb8","first_seen":"2026-01-09T02:04:54.344215Z","last_seen":"2026-01-09T02:04:54.344215Z","times_seen":1,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-button.a8c7e275.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-button.a8c7e275.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-129b\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHIVtD2pClq15WcUnGFrYISCWKrnPM23qEfZu8VsNNVriG3shrwdF1w9eC9wRCrIww494slgTQwS1fPtRMvWDFXZLMVprOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d268c2356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4762)","md5":"499f296f70663783fed0e82290fb82c0","sha1":"e523fc2cf2f276028d1de3daad26d019e1a7e7c8","sha256":"7d7e54a45ac316598fe9427dffba23fafb7816a4c5ccc2169b344b2f70024258","sha512":"5346f7e46809bdbeec01a9547a496a6bf67f99e9d96b10ff051b358d0518b704d13633f6d920225977cb11da10078b3c842ce0ec5fa1fe9b2b85fcbeec1f0c3d","ssdeep":"96:Rg0pHUD//UusxzD9831y6MX6eA6l5+Vhc8/YFs2GXUx8TCZ8NAwNGgEknZ1Q3:uym74Iq6ClEApYUSTCUAwNGonZ1Q3","tlshash":"c5a1e8243179cdbb6ecbefd83054291225259b6ee53475d1fea4607a138b8e590ccb28","first_seen":"2026-01-09T02:04:54.340898Z","last_seen":"2026-01-09T02:04:54.340898Z","times_seen":1,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/pages-index-init.5a42133b.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/pages-index-init.5a42133b.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/index.7aa97607.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-5d7\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Gn3PMwdu75Oyv0X4nwQzq%2FDGv9NYWm2YrKBvjZ2uL7AJnrQDr3DVSS%2Fe1pj2mrOAgJI07tQnrRTDY4xZ3C1clnWqx4y%2B0g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2a7c9856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1494)","md5":"f9b4e9cfda2a8b0e1fed61dc6e5c4345","sha1":"bf1e652b1c1a7d67361f20fc24721fdfda64e705","sha256":"efd3e775b2b485076d88bee589c47f8448d407febcf6f196502f104780f8a50f","sha512":"3ec85a673325be705d9f05c9e92a234cfebbcd6dd1f796166690060a15d68c9fd05e324a374cf261ad50aab2f38b9ba02fdbdca4e3182327adc487c4eeba536c","ssdeep":"","tlshash":"f831774b32afaa766f721847f5fc2c8847b21b841c32f4cd7e6a5c1958f2d89088d321","first_seen":"2026-01-09T02:04:54.345472Z","last_seen":"2026-01-09T02:04:54.345472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/v1/api/exchange/getSymbolConfig","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en-US\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t82D0fP%2FHi35DjXlYYt3hz10zTZP5AL5hAXFcvenn5pKBpYxYF67cfmvQ6T0NJWFx%2BvYnsN4Cqq8GhqF4BAiOTCT5mCx93o%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bb05d2bfccf56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5890,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47561170fc699892dc67a746433dc34a","sha1":"1d47030970633358bdf807fc991d431a640701f3","sha256":"dc11730f9c12254a9e47a0aa878cd79a2bd36bb5c0cf604459d35a16afd9ae47","sha512":"8a9985d785a9a5d08bbdc31289c3c002cf7f0deb6ef7b5272c7611314963074201268fc12e7f0dc465055f8fd814edecb4cf22717965b2eee62218b463c1516b","ssdeep":"96:7lx2V5Ej2PUnl1aECWtRWRgj1Vq7yPXZVh3uyP6yWuZZncg0VAnwbcnafni1vN7a:78wz8Knqe/ZmYZ0yRqi1vw","tlshash":"adc19855236017afc161a1c21ce23fdc196e29a72cc60b51a6fede9e83109ef3523722","first_seen":"2026-01-09T02:04:54.346552Z","last_seen":"2026-01-09T02:04:54.346552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/favicon.ico","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:27 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsdAmArfqtdOq%2FD1LSloZFdXxXVpgre5vr0gW0lrMhXpgMbqVR6VpDR0HlfiYd5qyfOo4Fh%2BhsmREXUjazC%2BwwAKe6%2FRfyw%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bb05d2d3cfc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T23:57:35.198566Z","times_seen":548538,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/psg.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/psg.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7oWlvaqVVyaW3wOzESpVz9pH9eGBk98+p19ZU+hyA9lqEAx3SbSBtaAEXPi7GRFWSPvqAqox0PDkx9vd2FttRFlM3lZfLGSToJTWKuvaMNQ=\r\nx-amz-request-id: KDTSEM19C1JY8Y5T\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:25:29 GMT\r\nETag: \"71d001dc16f522a80b0d27c28e947fc9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 71831\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":71831,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71d001dc16f522a80b0d27c28e947fc9","sha1":"8cb23ccb55c480a1c15df8b696d40bdb45b777bd","sha256":"c203f6e5b6457611be12973824aa99cc88659ef455d8a04a6902a0b21b2a9e4c","sha512":"eeb0b27e2651b05b0418ffc64df6be22e8e405127b9dda87451d1eed40cde4a672f5eb52498068add547f57a82b7183f075246eff6fe61483e058f79265c5ef4","ssdeep":"1536:EO81xrez0YhxU0vdAhTgZlIw4iaP/MEyyejB/CI3Ly5BBYXn:hixC0Yhx7vWhTG05/MEF8h3LgE3","tlshash":"4363026d71807b584740498870bb274c4f9ba9e14f11f66ad44d9e9f8ba0caf2c236b3","first_seen":"2025-03-11T08:52:08.6073Z","last_seen":"2026-07-28T06:18:25.094456Z","times_seen":180,"resource_available":false,"data":null}},"time_used":1845,"timings":{"blocked":624,"dns":22,"connect":284,"send":0,"wait":308,"receive":285,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gHIuq9cnX0GbGA4MnPPnpRKvv85WB+dJRQYPDH0KWROgodgt9zjxsdsdvRZCOBNMUOWc1pUqimU4sY6oAMSH2jd+HGcStmx9HxwTMo8Z0Z0=\r\nx-amz-request-id: 48DM46MZEJZAPW3V\r\nDate: Fri, 09 Jan 2026 02:04:30 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-08-10T05:13:29.71787Z","times_seen":421,"resource_available":false,"data":null}},"time_used":1564,"timings":{"blocked":1254,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/activity.1a4e9ff6.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/activity.1a4e9ff6.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"689ddbf5-13f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUjijiyI8bhsdAnwk12EveXGtJBgHgO0TQicXbqXM9l5eDZJgaHE3ZcXMrNKQU1%2FOHndOXcWJPbbTN1GTwYIrUDuNsHwpYY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bb05d268c2856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (318)","md5":"b3b44025e6bef23f8c919a5c1e05f383","sha1":"fd651af4d7f1dc906ad93ceb2dfc350a3a34381f","sha256":"5b6f16d5bb4d370e2febec42953cf6ce6b20598b93b50c50edfdc52eb81717cb","sha512":"e193c104bbeff9ce1bd16984c638c73391a2fadbd2d8ada93f5eee7da2d9d4ea0ec8a3c0ef260a02bf5676f06784c3ad10245f10d707fdb0599190b99ef2fcdd","ssdeep":"","tlshash":"b2e0262e2114f7b38a020097805e6a43a317ecd00f0a86a0ae0a134c3ab21ad87fd46b","first_seen":"2026-01-09T02:04:54.349351Z","last_seen":"2026-01-09T02:04:54.349351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/static/images/tabBar/home-on.png","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /static/images/tabBar/home-on.png HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 605\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\netag: \"689ddbf5-25d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6jdBEnYcXUoAL20%2FMRv%2BCW4tV50QtSSkQt5WKMQUWp8fIAnpinAAFikDgG1LXVlhVYDuQjFgnSHoCzz%2BKR4BmzWZ%2FuRIQ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bb05d262c1256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"def19a0db24fe00a493b990c113b892e","sha1":"d61ec86b8f6d09170f76746cd9412b432d40fed5","sha256":"d279492339d20af5561086bafb7acf11427bf1b4a3a755a599bbb71192085056","sha512":"c7a7db8906c507fce94504fdfb2b14d4a470d62de1106e2ee0c4cdf1a78705d02177dd068e59ae354e92c1cc3a7779b9de3201a3107e8652cdb4547b5dac73aa","ssdeep":"","tlshash":"a1f047e668c1ff5eeff478a366a171f348b42537f3014f6750058111525c734697954b","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.727258Z","times_seen":297,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-segtab.b7e3d6a8.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-segtab.b7e3d6a8.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-1286\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oL2zBS7g%2BkHYs04d4s8RH9mfLh9GTcQBFrH4DDYyedKlGrSv4ZclpM0CXkFxfoT6qVKrriKNbL24Pw09LrG%2FqScwBG2b2qg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2bacbb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"8a6ea9b8eecd5d22583e2ec63058f145","sha1":"2d6dec581559223ce7ee26a75f64a7653eb09551","sha256":"315d2e8a3ac8980f31ee8718d900f95c6883bd813f6f2e1d39fa83777fd0c09e","sha512":"2b2c1fce652127840360a54c8ec72abaf0b5e1157d90ef3f5270e1cb7d23137ddac0b9845a389a2fabcb6c38ce99c817074907e5847ad14cfa208087ec6871de","ssdeep":"96:OvHXspZgoBReFcJdnGW00LggbMiY4FCx/PLt+pixOwCCdcbILzJ3Cuq9:UXaZVwFc3HzcG4/PL2OyIJyuq9","tlshash":"47a1d878723ca83d37bb4965b07251815209cb9fd739a0d271e8047552a2dc45addf2d","first_seen":"2026-01-09T02:04:54.350764Z","last_seen":"2026-01-09T02:04:54.350764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eos.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eos.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: fAjs6DEAmK+xBybY0LeDVKZg864rEgv+X5abfbe+0CSDud/3FHd/Nizv4V31R/sPTzWZE+CNYHlGcbTBSRMqFAgC4Md3jtgHQld+cuxpZQI=\r\nx-amz-request-id: KDTQV4JH4NZAV5Q5\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:11:38 GMT\r\nETag: \"96364067a53dec3a858b9a41163133eb\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2061\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2061,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96364067a53dec3a858b9a41163133eb","sha1":"84fda0fcaa9604e7ab19b7d53cac1b05304876c9","sha256":"efb1d77085cfde506d7d144e7caeb706841c2f8224a4f09420ce64a7be0f9b36","sha512":"593547b9c282eac2dc54027c9c0ca2f1ca060f6e063ceedb49ec289113b615fa1a881f1337be2562081c593ef5be6d1ad424c8c85e1acf7a4cbdb2e769fee114","ssdeep":"","tlshash":"774155ccb280fa10fd0ca3f9125198f235361e67b2d3c27683e61d15e92446c96794e6","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.720089Z","times_seen":276,"resource_available":false,"data":null}},"time_used":1581,"timings":{"blocked":627,"dns":26,"connect":283,"send":0,"wait":323,"receive":0,"ssl":319},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T02:04:23.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 09 Jan 2026 02:04:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLuYXxAJ8ec7e8yiNBkpMzywmMupEW1qph2AJbfNGD%2FH8dOI93zWHS%2FL1AoQChT0nwrl3KrlMwU8q0Zff8YfqMop2E8GGukKEw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bb05d153d0f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"23a6cc404f07daa534896e61b841ebb8","sha1":"7d92168d83f7e5845b441f40e92d3bd094fe8bb2","sha256":"a87f008686f5f78011e023e780a9786ebb82eae2b076c4c093debcfd0273a257","sha512":"452c972e387ccf3ebf82e4c9d5a3cc4e0a310c6ab5a16f4034aba9e353423a2f73fcb3b7178d3a05c5f5bc859a71d1c70cce3d55857322eae9fe463cfe0e184a","ssdeep":"","tlshash":"7311468140f259081210025569e4f8672fd2cb634e4acd603cdd22648fd87cdc89fc74","first_seen":"2026-01-09T02:04:54.352183Z","last_seen":"2026-01-09T02:04:54.352183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":613,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Readex+Pro:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Readex+Pro:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Jan 2026 02:04:25 GMT\r\ndate: Fri, 09 Jan 2026 02:04:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6714,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"b58a2b65d23adae432d6aede5f3a6bab","sha1":"194dfc8b1d63db1339585ff5c3a14cc6d8aa7d6d","sha256":"f47b4165cc9585373f8c546eefedc2df4e0ad1541865992c8dab1c2f7af09eff","sha512":"ff040a0aa6695698ce24e62c97f3905df671c9438646d083504cd94441c2e705e3ca213ddcb10cba401d79e7422c3a53b5bdcc869b1d26218bd05df5809e3cb6","ssdeep":"96:HOEawZA0Zl8DCK9cH0fOEa6dOEa0KJc+uDOEayMNsOXawZA0Zl8DCK9cH0fOXa6M:AfCl0obbdGfCl0v0beDfCl0S9b7i","tlshash":"86d1add5481f55487b471dc262cd7e23ad4da1642080d4689ffe278bacdfd22376839c","first_seen":"2025-09-19T20:01:38.034194Z","last_seen":"2026-08-10T05:13:29.710052Z","times_seen":140,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":76,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/static/images/tabBar/jy.png","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /static/images/tabBar/jy.png HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1057\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\netag: \"689ddbf5-421\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K15NujnTVrONk3OE7%2FkBw97oWKoc%2BqiCwRb7SDWMtQTf8CU7HrzbAe1IWC0JWKh6%2Fcy4fVK8oo9k9LeOp%2F92lqYGWubZzNw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bb05d263c1556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0eccebc7bf864ab6f6432b3940225365","sha1":"e5a941399606443f76e8ed05f26dca79c8888d52","sha256":"0dfc4fb9eaa75a6985df6fae71271d38bd8b267c5eff4db97238b5323dcd94bd","sha512":"b8398d20cb25a47d5790dde5eefb4dcf0f634d15bb6e6a4fe6655e8032d81e55a17b981e6b0ce74173a9c1f3a6e75d9844c76d04e376e10835a7dfc2c7b5646d","ssdeep":"","tlshash":"4b11bc911f6742e4cd1f551a28241760cca21df83c259f89d5b87e46b36f5f50f115f1","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.732355Z","times_seen":296,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/pages-index-index.7cf21931.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/pages-index-index.7cf21931.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-ad1b\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10uixCgSftD6mAHG3IAGpeAHMf6EqezRI6vRLt52UJfv0DdSV9o2QoslMyc%2FXwHPgCrAOTVs1qBwS5XJ3zI71WN5utM47X8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d267c2056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23568)","md5":"bc3a43cf3c11433ce7928cb85c9e3036","sha1":"1f221c0995db664a8a45b7b29dd1c01c8582b7c7","sha256":"d100607320744f58507b50f2cbfccd0893cf8c2dfb07dfde52f5db9f0d0e2d1b","sha512":"77a52dab2d3139b508dd82b18bb9a147fdb90f8d676f8fc23c4438ebc03265d611bd404fdc1be983f03de0f89a661a3a97f3b3c39bc93f0603c637f81c8c9eb0","ssdeep":"768:uHZnBMB1JkDeR6uWDvddhhrJAP5cq8DSqmfXTmJOf+XzC2DyORpqaMJXqpkpm+A9:XR6ugrnMj8DSqmfXSJrzCcyapqaMUpeu","tlshash":"8d137bb2b55c9e7ea727585dc860080131dc4e8ea219f680fafedc3523d78445de97b8","first_seen":"2026-01-09T02:04:54.3543Z","last_seen":"2026-01-09T02:04:54.3543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-tag.3016e579.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-tag.3016e579.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-fa6\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUMwLtKa5BqoOVS%2BAU2%2FJj%2FTmmIZjbavyj%2BFkDQIzw0QHKj2rv9M0EeSrEkEefSfqWkv4XozpVXRgK4XoNN3EwRbUqMvDmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d268c2756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4006,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4005)","md5":"b75143323409b39de30f4984dd5140f7","sha1":"8299e41894e78db206d80a7cf161070f41817843","sha256":"ee2b2e782cdf7bea238a2670e4bc6305d37e78aafb99dd7a738ad199ea5745ad","sha512":"454d6bb7f7fbd0c21900a554fdb3c87175eea44574e6d38504dc93bb4ab885eb78a204f80b57f37719e18b82365651be2c9d56ec84f878f540a279909e16900a","ssdeep":"","tlshash":"9f8167b43d1448f656ff46cca172ae0d4929256eac357ff2f5a111245cf1915b04e73c","first_seen":"2026-01-09T02:04:54.343271Z","last_seen":"2026-01-09T02:04:54.343271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XnOe5FHLowft4PAdSRT8/L8h3MjZlaveGV7JGj9tqc8AXpqG32JzV8U0HoloksSiAWoWyLSW4RmvdtrJ6hVboe95ftRMplYj5uBX+GAdNHM=\r\nx-amz-request-id: KDTYRA8X5K6XVEF1\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.721169Z","times_seen":546,"resource_available":false,"data":null}},"time_used":1565,"timings":{"blocked":630,"dns":31,"connect":279,"send":0,"wait":302,"receive":0,"ssl":321},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ksm.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ksm.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2+cB7XZ4FFU1W4e5jBvVrLL9W/7vcomkUBKI3PJ+Uxqhp6erJvjslHtb/1eMxhEeuN4MdEjgJLVvh8HVbBSqNtLITywW+oK9tRzGxNaUV+M=\r\nx-amz-request-id: KDTWC7PSWRYGS37W\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:56:32 GMT\r\nETag: \"87de3ee0fdebb621dabd4796598f6888\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 4490\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87de3ee0fdebb621dabd4796598f6888","sha1":"f8dd822f8f7b75fdb2b18ff10266deab9c397dcd","sha256":"64613bc4f18ed4f69a72222af826cb68733ad5ffd5990a2223ab689da62f1f56","sha512":"601584512d6d26a0488c0430ce4461fd9516fbffd408b04beaed4cdbfa123fdddb741f28b2a32694a1bc65d99013208e71b6b0a3e364a7f671f8a6b0b0b23bbf","ssdeep":"96:QRazcf7/YySPnq0HGo0GJc5pr/LEDwjc0RfEtcy/lB4X+:QYzI/Yfnqi8zEkjciMcy0X+","tlshash":"ee918818a32ecb7cf509f6dd4717c874e68bbe917812c48e5bab0847d2a142d48b78c3","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-08-10T05:13:29.711615Z","times_seen":228,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":942,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/static/images/tabBar/my.png","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /static/images/tabBar/my.png HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\netag: \"689ddbf5-298\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZwZQfNJLu5hlOxZYg4VrQV2y0%2Fzdev7isp5PGj6LBXGCNV3b89ZTXPvvqOE7bLUAt78yWg2aA7OErhUPkKrOv%2FHk8Al2Go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bb05d263c1756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"5fa0e8c8be776e0ad69b41eb29387ab1","sha1":"6a7dee6c2139d15e5fbe2f7a6ebabee07354710d","sha256":"eebdc7fce5c2de4f58a49db1cd4bce63341b14bcae199d396eb1ab5a2bea3807","sha512":"3e5432b58d865b134fe84a068a9ba7e01ba3dd19240f60e45d46bf5f3d727ece1a6e05350e467b63efebf0236304366bc4980d3dff4287354f03828c86fb18d9","ssdeep":"","tlshash":"3e0183e7bb204566c20c9a881801a8a9863790154ecbad49c564c1b82c2240656ff7d2","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T18:41:47.413868Z","times_seen":298,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/doge.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/doge.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Nx51uGrFTKqqctm2UBytx3OBWkDI/dXKw/X9ZJoLuJ1XrwJdLHgf6ufupSjD9vvBAiB7owVe+p2fnOzUfPnk5CQNaGJyd1zNZ9fDSirQ44g=\r\nx-amz-request-id: KDTWGAE2H5GMCWWP\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Thu, 14 Nov 2024 02:02:53 GMT\r\nETag: \"85a9905c5ded19678ea5c2a0e3eb5b92\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 95699\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a9905c5ded19678ea5c2a0e3eb5b92","sha1":"758fd685e61ce28ddab9bcebfc60f62f1f2c150f","sha256":"83785fe3ab9c29b35a4884d93864038593ac03e6f605a5cb6bf9f7567e338abb","sha512":"a88cb74309d3fca02ce1fc32c81f0d78c387a4936c0f2924c603037201d14b26a5fa715723f40d01868d2a41361e26e2a2abb315e32332970ce15a186d8043dd","ssdeep":"1536:LEpYE8EXjfWGPQcIhSWQnGQBMDPla2zoW1:f","tlshash":"da9394d5b7e5e2e8f005e3fc872a98f53a632cfa3922c95893e52c15e95102d489dcd3","first_seen":"2024-12-15T14:02:10.456974Z","last_seen":"2026-08-10T05:13:29.735125Z","times_seen":335,"resource_available":false,"data":null}},"time_used":2425,"timings":{"blocked":780,"dns":30,"connect":279,"send":0,"wait":302,"receive":559,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/juv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/juv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rm7XSDHWEhmYKCfNofaqXbYYJw5/elC7lIxejRml156MqgPhuV7zzihDZKMdGQ0RsRvQqPGW6InGq0AHS1oCXpEU25YGNm9zIc91ZoaS+8M=\r\nx-amz-request-id: KDTQT5A1AMNR210T\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:26:15 GMT\r\nETag: \"fe957680ef81f353455d3aad7dac0fd4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 51231\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":51231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe957680ef81f353455d3aad7dac0fd4","sha1":"8d4feb503bc45a3bc2ed2f7dc8f0be3ede52ade8","sha256":"fc4cacb9287e561349c5ec9bd89d977c1eb5877ac251589164dd20a300aa9ef1","sha512":"6c3098256b8dcc6d9d374db969a0253ab782d6fbb465a98e7ba4644ccd64059ce072e04ecbd3172bc44df17dc99cba6f4f0f1931e301d7b7b1028b3385d9d01c","ssdeep":"768:rqSpyH2cUwSzH3C3xqNPNvvV2Y8tH4dce1gWNUgIUxG8Mva6sP1wP37YZmRaKliL:rpJPNl25Hje6hUeaTPOP37wkAV3Y/W","tlshash":"9533023c3e697c1f4b688328f839ae0c38c044fa9f4641297696ac65241eb45ff95b57","first_seen":"2025-03-11T08:52:08.587629Z","last_seen":"2026-07-28T06:18:25.104102Z","times_seen":172,"resource_available":false,"data":null}},"time_used":1518,"timings":{"blocked":929,"dns":0,"connect":0,"send":0,"wait":304,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/pages-index-init.5a42133b.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/pages-index-init.5a42133b.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-5d7\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8YDy7GiE8POeaqswFRlSj1LSaQ2BKuNX0G0YJkQtTcHoy5fEQMOzNdE9JA81%2F3b0%2Fp%2Bsaf4uyUk5biO1zuyeMR7XuCaJZc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d26ac2d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1494)","md5":"f9b4e9cfda2a8b0e1fed61dc6e5c4345","sha1":"bf1e652b1c1a7d67361f20fc24721fdfda64e705","sha256":"efd3e775b2b485076d88bee589c47f8448d407febcf6f196502f104780f8a50f","sha512":"3ec85a673325be705d9f05c9e92a234cfebbcd6dd1f796166690060a15d68c9fd05e324a374cf261ad50aab2f38b9ba02fdbdca4e3182327adc487c4eeba536c","ssdeep":"","tlshash":"f831774b32afaa766f721847f5fc2c8847b21b841c32f4cd7e6a5c1958f2d89088d321","first_seen":"2026-01-09T02:04:54.345472Z","last_seen":"2026-01-09T02:04:54.345472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/pages-index-index.7cf21931.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/pages-index-index.7cf21931.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/index.7aa97607.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-ad1b\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifTl7GD0b3zAygasaG4X5741SqaiwqhkfOw%2FJvw9ENTyBKKIEImVdL%2FXTy8Buq%2FMBXkyxns6Jxb0UkSvnQYmK9gXa4r3CN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2aac9e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23568)","md5":"bc3a43cf3c11433ce7928cb85c9e3036","sha1":"1f221c0995db664a8a45b7b29dd1c01c8582b7c7","sha256":"d100607320744f58507b50f2cbfccd0893cf8c2dfb07dfde52f5db9f0d0e2d1b","sha512":"77a52dab2d3139b508dd82b18bb9a147fdb90f8d676f8fc23c4438ebc03265d611bd404fdc1be983f03de0f89a661a3a97f3b3c39bc93f0603c637f81c8c9eb0","ssdeep":"768:uHZnBMB1JkDeR6uWDvddhhrJAP5cq8DSqmfXTmJOf+XzC2DyORpqaMJXqpkpm+A9:XR6ugrnMj8DSqmfXSJrzCcyapqaMUpeu","tlshash":"8d137bb2b55c9e7ea727585dc860080131dc4e8ea219f680fafedc3523d78445de97b8","first_seen":"2026-01-09T02:04:54.3543Z","last_seen":"2026-01-09T02:04:54.3543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-drawer.83de1656.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-drawer.83de1656.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"689ddbf5-1f1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZ6qRFwa316t7syX8xc5JNoIPugbiOw%2B4JVXn2fhaxRODQuJgZ1NpMk9MohTUSI15FxWONlmossy8koapJvviOLrhq4z5Is%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bb05d266c1c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496)","md5":"21760436a7a71a0a2257f1f0aeb3bcab","sha1":"88dc7eebea231f3ffeae69bee7dc7cc872ac69f2","sha256":"ed33f15247424f05f2338f5a2e9dd2199c8405afa9b3007b650ea9178c16dbc6","sha512":"631cfb7e0c813f298381f9c75372aa2a5fc4965294c54af7a36a97cf84a71c1cdb0d1038166e84c276e2134c5f08d7ad45ef4da11b0c5ed36b2a7c154b6ec941","ssdeep":"","tlshash":"f5f05445123e1f34dadbf9495c75270b8ca3e150cb1ba01c52a70a2e58efa855e609ec","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-07-24T05:21:13.389899Z","times_seen":242,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/activity.1a4e9ff6.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/activity.1a4e9ff6.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"689ddbf5-13f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vczDSoFPvcSXarhB1x7Ef1cyjPjiozfL5uEfBCB8StLHk13AAM2csBnLC24Ba942b6pDpJP7qPjy41YexgKuv7Jd7YL38JQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bb05d2bacc356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (318)","md5":"b3b44025e6bef23f8c919a5c1e05f383","sha1":"fd651af4d7f1dc906ad93ceb2dfc350a3a34381f","sha256":"5b6f16d5bb4d370e2febec42953cf6ce6b20598b93b50c50edfdc52eb81717cb","sha512":"e193c104bbeff9ce1bd16984c638c73391a2fadbd2d8ada93f5eee7da2d9d4ea0ec8a3c0ef260a02bf5676f06784c3ad10245f10d707fdb0599190b99ef2fcdd","ssdeep":"","tlshash":"b2e0262e2114f7b38a020097805e6a43a317ecd00f0a86a0ae0a134c3ab21ad87fd46b","first_seen":"2026-01-09T02:04:54.349351Z","last_seen":"2026-01-09T02:04:54.349351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-segtab.b7e3d6a8.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-segtab.b7e3d6a8.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-1286\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOF0kE7k50PSWeuB7KCzZd%2FXTeHIBdDfsp%2F%2FKqRW3OJk241mBbyEtoTG%2BDbJLBjSOaqMOHk3IjcEQyt6m3WmtMcC3R9xu2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d267c2156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"8a6ea9b8eecd5d22583e2ec63058f145","sha1":"2d6dec581559223ce7ee26a75f64a7653eb09551","sha256":"315d2e8a3ac8980f31ee8718d900f95c6883bd813f6f2e1d39fa83777fd0c09e","sha512":"2b2c1fce652127840360a54c8ec72abaf0b5e1157d90ef3f5270e1cb7d23137ddac0b9845a389a2fabcb6c38ce99c817074907e5847ad14cfa208087ec6871de","ssdeep":"96:OvHXspZgoBReFcJdnGW00LggbMiY4FCx/PLt+pixOwCCdcbILzJ3Cuq9:UXaZVwFc3HzcG4/PL2OyIJyuq9","tlshash":"47a1d878723ca83d37bb4965b07251815209cb9fd739a0d271e8047552a2dc45addf2d","first_seen":"2026-01-09T02:04:54.350764Z","last_seen":"2026-01-09T02:04:54.350764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bts.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bts.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vQyiVYsR4DxJexGbYy6cG0mxJ2YzbyeMENO0j7sgVHPVjKjLVT4IkcwTzXCW4mAJizdrlkhPqUp6aCv8ofdD6GnHlRqftvD5J0wah+g5kuc=\r\nx-amz-request-id: KDTHY2GA526VP3AC\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:40:04 GMT\r\nETag: \"a12001eba3f8b40d252d09e0d21f6884\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1433\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12001eba3f8b40d252d09e0d21f6884","sha1":"874702fd7e69b788e419bd5258c9a80a9edc486c","sha256":"c9c78d7bb49415d4816f380f883baff55ce5f88997875c36d8ea98846a191c5e","sha512":"891a2a6a3f995e8070e6a6f2c6b9922be3539cbc22347e05fd867ee4a49495a5a6d2f4a7db5bc641daa3c981d143d14d7526d018af2252ba3f7477f7e6afb931","ssdeep":"","tlshash":"0c217411b324a23c30087afc527ae473fe605ef2951150d4dbd90d80f95266dada2dd3","first_seen":"2023-09-10T20:06:11Z","last_seen":"2026-08-10T05:13:29.734513Z","times_seen":281,"resource_available":false,"data":null}},"time_used":1520,"timings":{"blocked":1211,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-drawer.c85ff373.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-drawer.c85ff373.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/assets/pages-index-index.7cf21931.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-162a\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fbc318KV13zi3mwKLpgazChQiMCmJR8RmetER6kj%2Bvb8B2osHdNqw81VSOgO5LxO3NqQJDEuR3reN1KbUqOgyo%2BMc3IPCgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d2bacbd56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5673)","md5":"194c81baee248e4d81976602a908cc2a","sha1":"eb077dc8fa08842c9ae0d391805e10e8f2913c67","sha256":"8306151d1493692316e3aacac1971d114f8ff20718c23f378810bfa622961a39","sha512":"d7146a98e101f38dce0e054bb776fba74360fb98b9ac54a607b96494b4fd7d2fe2e5216cab9546f943521b986c45d2b0f59c0316a844043982c849e6ff1ad1e5","ssdeep":"96:3OvDpw3F5RUtxr6SDZbCzQrcQw2D5IWW6iQ/IDu/PXmVWaNmz1Xl5o+H+g:S1emBNoQwoP3aNmz9g8+g","tlshash":"aac1c798746e2373a6b709a5c072480d133d1f5d997876c1f2e2293a36f6d484dd8bb8","first_seen":"2026-01-09T02:04:54.344215Z","last_seen":"2026-01-09T02:04:54.344215Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/chz.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.156.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:27.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/chz.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tvQiFRBFNsbrHEmzb4anvd8TVwp/Q0yYIqcBbElttjQGWh4J8IuF2PBOVJg8vwImZdd+SJ43RyneildA437RpnDow2htimr5elhvdXTUKfM=\r\nx-amz-request-id: KDTYXZR4477CS1QD\r\nDate: Fri, 09 Jan 2026 02:04:29 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:43:18 GMT\r\nETag: \"c07cc55bfc92d6bc8a1004e4dcf9185f\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3619\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c07cc55bfc92d6bc8a1004e4dcf9185f","sha1":"3a4265522a63bd41a2f494ceb1e3ec917d902761","sha256":"eb1f403bd3476588a1226280f4265767e987e010dd1b57edb1953abe09bcaac3","sha512":"7d03d560f133425709aa2eefec5279cfe24d6cd6ba49a39449f0b1ed61ca4839aab47f2fc9a4990c235ec311d8f93d06b5a5aa1f99f8d920ab8e22bf432c5990","ssdeep":"","tlshash":"a87161aab37892e8a504fbfd960748f46a6b2ce57612c55997e41d82f28000d05b98d3","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-10T05:13:29.729082Z","times_seen":259,"resource_available":false,"data":null}},"time_used":1560,"timings":{"blocked":624,"dns":23,"connect":284,"send":0,"wait":309,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=SF+Pro+Text:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=SF+Pro+Text:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 09 Jan 2026 02:04:25 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":155,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-segtab.206f8890.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-segtab.206f8890.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"689ddbf5-92\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8w6lMbReqtp6Mt5u17aeW9WPYDhhjsqn6APmy9Ngd6Dg8ga6qP5Dm%2FUjI%2BxfhD7yNOI1yGy9POaksURMBQK2KJ0K7I13C9E%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bb05d266c1b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75ccb9822a43118d8c5e0206ff76969d","sha1":"a5ef88a98bc655e6a5ece65730b095a43ee36990","sha256":"b394ba56d52aa7ceeb7ba3fb6e93456d813751a536c69622f8c143e16e0a1bc1","sha512":"73ca6de779b6324af6b6b5043b58671da8947bdc578883bef3b5fe7ab9319dfaf053311bb001a85b4ab844944d2689db6a9f2bc17dd18ecd684deac1e2c93697","ssdeep":"","tlshash":"0cc08c54e31821100263871390c25c24c338ebc2ffa2a82db3404107080312d2263f92","first_seen":"2023-09-10T20:06:10Z","last_seen":"2026-07-24T05:21:13.424086Z","times_seen":206,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-button.ddf396b1.css","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:25.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-button.ddf396b1.css HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"689ddbf5-12d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtbUa8xfyK8PI4e62W4pqEErnRER5vuToCBDF9E2iwbmNNcncfKUomFLISRICOtDu5B53FYcjq%2Bmp3Giz6ddPVcIEh6G10o%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bb05d266c1d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e9f614f6c6215d066c9fdcfa7645776","sha1":"2728ef74e26aa186fa6e3f87bf11cedaa46b42de","sha256":"0c7a24f6669840fcb16ab71c6c1b55d1c1f72dbc269ed86d96e21c5fabd21b55","sha512":"c0e93448c7e9834b782b41a6bdc249c9c5eb342c2111bdea2a1833fb39f3c93653442f0eed89f45a058633b1ecf2509e5bf1226ee4c21d771375eea8c8af080d","ssdeep":"","tlshash":"33e0c2f1398e408cb537e3c2e058c015aed02513b9542b291ee402c10e0209bb424f49","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-07-24T05:21:13.344602Z","times_seen":249,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/tm-app.1d1ee7ff.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:26.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/tm-app.1d1ee7ff.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exavo.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-a53\"\r\nexpires: Fri, 09 Jan 2026 14:04:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KbY8nTlhHGYrr3DGJAXAREJAiI11DxfJnOTWu3qOQpgjEXmBGK4hNEMH%2BW8yqTRxyqkaxT0r5IlaNJ7kpc7Hn%2Fa8cSclHgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d268c2456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2643,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1999)","md5":"ee7543eabd900dffa14df11c30f3e88c","sha1":"e68094ec81634711e3acb83220c551203ff31314","sha256":"f6054a62a801cf7678ab3a1c6ba190d908652d1fb80af818015fd43ccfe784cb","sha512":"f60b77b7a64cf4f90f5e988582463169baba0bff241d2d437de9879b491809f3a86603ba199faa14aa1df1719fec23d06214aa727b6089a542d0202422126359","ssdeep":"","tlshash":"4f51753d31e9b27c623746ce5476574c184b776d4a326bf6d27a78703080c68725fb68","first_seen":"2026-01-09T02:04:54.342517Z","last_seen":"2026-01-09T02:04:54.342517Z","times_seen":1,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exavo.top/assets/index.7aa97607.js","fqdn":"exavo.top","domain":"exavo.top","tld":"top"},"ip":{"addr":"104.21.83.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exavo.top/","date":"2026-01-09T02:04:24.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exavo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:32:10 GMT","end":"Sun, 05 Apr 2026 23:29:48 GMT"},"fingerprint":{"sha1":"32:4A:26:55:D5:69:6D:EE:85:AA:DB:28:FC:AF:E0:F3:AD:04:94:72","sha256":"C1:AD:90:18:BF:EB:FA:A3:65:A2:3A:57:41:A1:C1:41:3F:B2:E1:2E:53:5B:3F:42:12:FA:24:F9:55:48:C7:B3"}}},"request":{"raw":"GET /assets/index.7aa97607.js HTTP/1.1\r\nHost: exavo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exavo.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 02:04:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ddbf5-192c2f\"\r\nexpires: Fri, 09 Jan 2026 14:04:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gR%2BFNscNccKzOBEneD3sOGJ2i%2FMNku9O3WuEhvQGi%2BU32unJ2GlmFnomWiUVCpshzDYhb7dw0kYgqOQVDZOhdbpdGncswvI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb05d1a5b3f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1649711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60832)","md5":"acf661308f4a69c2ac878727fab1d1cd","sha1":"429e5ca7e67e1c4a1714cf920463b938983c061c","sha256":"1b3d47f3173e2ae09a06e17c52624580e9c9ed63908dee12b66408e0c2f9c27d","sha512":"25f2e69e1330cf1c13a2ef8d6570789aa02f63d93885d7d4ffbadb91151a2c32c3e001977114abf825b0b1bbb8f62b71eec397a30ea8bfab0c3b56cbd91e4315","ssdeep":"24576:uPj4wJB/SDJ10XvQbJADwHIthalJcrLTsFXlh5FJvOGAxEQ2x0rxG4hIV6uAUrbl:uPj4wJB/SDJ10XvQbJADwHIthalJcrL6","tlshash":"322571c5d9fa540e8be4f046e5b82e9e2c4456c0ed18c37aac7c59f3d7cb1849aa136c","first_seen":"2025-08-29T07:00:25.428327Z","last_seen":"2026-07-12T23:28:19.763589Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":855,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"exavo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}