{"report_id":"c7c15c25-c67f-4fe3-af7a-c36b740c156c","version":6,"status":"done","tags":[],"date":"2026-03-19T19:50:16Z","url":{"schema":"http","addr":"nexbit.vip","fqdn":"nexbit.vip","domain":"nexbit.vip","tld":"vip"},"ip":{"addr":"104.21.69.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"title":"NexBit","dom":{"size":42571,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33301)","md5":"f7a11cca2c2a8b4835cd730de6366b3a","sha1":"46c11a24bc67409cab03ac86f0856a73df76e42e","sha256":"f658adca7b433be5a131caebb28a9af5832aa4b7b1954f241dddcc6bb8ffb60f","sha512":"a4f14234051cd9529b2a20e3ea22f9b82611166ee690403bdb7288b82b35248a7ba283b3a983243732dc667b7f72d7fe7fcbf81bd75aa583ed5677a4e66dc6be","ssdeep":"768:FmxuMifQxL2MolVZxuTf39sL0cXuGIYxOI:FmxuMifAxolfxHL0cXuGIQ","tlshash":"de13f3607660517a47e78bc1f6a17f2e3192e30bd4cad9506aadc2640fc3cb8bb05b75","dom_hash":"domhashfec78e98128df9e2436168a1e6a350b3","first_seen":"2026-03-19T19:50:42.64039Z","last_seen":"2026-03-19T19:50:42.64039Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexbit.vip","fqdn":"nexbit.vip","domain":"nexbit.vip","tld":"vip"},"ip":{"addr":"104.21.69.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-23T19:50:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nexbit.eomjdvkaec.yoga","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-29","domain_rank":0,"first_seen":"2026-03-19T19:50:19.783096Z","last_seen":"2026-03-19T19:50:19.783096Z","alert_count":0,"request_count":56,"received_data":4014002,"sent_data":24001,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webapi.nexhubitgyg.cyou","ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-03-19T19:50:19.797082Z","last_seen":"2026-03-19T19:50:19.797082Z","alert_count":0,"request_count":63,"received_data":158342,"sent_data":33541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nexbit.vip","ip":{"addr":"172.67.210.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-03-19T19:50:19.781606Z","last_seen":"2026-03-19T19:50:19.781606Z","alert_count":0,"request_count":1,"received_data":6445,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ee1a40839c1e87a3c8c0e59ad7c7f2a7","sha1":"a16cc515613480f5b7d589b5012e1488e5b0fd65","sha256":"6859d9dd3101c442ef2f927ac3fcc155cdccce983e45728b20454b7eb883e04e","sha512":"dc52d3f0e70f35c25edaa05bd6cc1c23e351886cea6a8ddf3980f5d8472169792e94966693dcef116af0b758fdd4543e669c1067ff9492886f4f84e23d357f8e","ssdeep":"","tlshash":"35c08ccca1da2d14160a657011bf39e4a0398827f84d2b028cd8dc4a2f270b88233ebc","size":163,"data":"","first_seen":"2026-03-19T19:50:42.700512Z","last_seen":"2026-03-19T20:02:41.853489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a50fcc4ae10528c9f6c93bdcdc495411","sha1":"9830b351e4d098cf9485a3e3754864c798e57379","sha256":"ac561ee5d208b7395f6d92959ad13529e5ebee3597dc0ab39973bb11a363e329","sha512":"82ceb4a82f011b70b55dafd1d7f2bb8a496d098f3041fcc7a5439cbb64dfe5462f8783dc97adc7b3c192a2674212cef37dc3452de1e3fa41e660008dd35b4260","ssdeep":"","tlshash":"8dc08cc9a0c32d105602652010af25e490244026b04c1b038c94dc483e220b48233e98","size":142,"data":"","first_seen":"2026-03-19T19:50:42.7017Z","last_seen":"2026-03-19T20:02:41.846518Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-736fc0ad.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc7a7291fae3f86797db8f368cfd5bab","sha1":"93fb2a60770b3ee71327809eb35ecb38e42aa5d6","sha256":"c62cd848be097e1185025cbaa16aea8ba0b2742a9309b477a17760057f7fc96b","sha512":"a160a301e4f3da8949690bd47dd43d267ff0bd5acb3d3a586d03814eb5411b62874768d3c4bcc7c4a20cb83c6d299e6bd842f9de4cdec63c24f193169723d66f","ssdeep":"","tlshash":"b7f0291f2969c17a5bf288ace2131820ea0c1e013338c0e4b20e0b166b384e5d29ea24","size":589,"data":"","first_seen":"2026-03-19T19:50:42.687027Z","last_seen":"2026-03-19T20:02:41.818168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"713082ef3335a3864143cf580ea9bdbe","sha1":"7d0d31d2b731a2a425e1d70c3133fb2a1fd814d3","sha256":"a03119889a9d52b3960390c1f21e493ebc0aa4ce27dbbf6c455fd2aee59c1189","sha512":"f89d9e4bf92351ccca844c1d64ae958f63d4f4dae6497e26d52efc79e4727a2f3559704e16f4732a4db1661cd9cfe7f40977f9ee6b2058e9163fcc394f8286ee","ssdeep":"","tlshash":"29c080cca0d26d0456115534556f39d490358836b4581702cc94dc582f130f88137dbc","size":154,"data":"","first_seen":"2026-03-19T19:50:42.70272Z","last_seen":"2026-03-19T20:02:41.862794Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-d7c550d7.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7be74ddd93f7ce181f152da6355c5bc8","sha1":"7310e6fa4a14a264faf4f95dbfa5407c6a731172","sha256":"ecfe5eab80306e8212574fde11894ed82d9dea95c619149c4e5157d611a3071d","sha512":"422671c4f2f4049d5ea7b88fd5d8468674bd8590abbaf7f9d3a77f4f535e7fd89d9710984d5caf8e7d397434c63d806646df57e6844e479625e24c525dab3683","ssdeep":"384:Dx0TP2284tjpoxcmGBGMlbFjK7NvE/Z6rt:DxIPN84tjpMggMJENvE/gt","tlshash":"8242c982922a92e553b54b4845123371d114763cb5888cf117dc4a037af6f87bb9bbe6","size":12866,"data":"","first_seen":"2026-03-19T19:50:42.679704Z","last_seen":"2026-03-19T20:02:41.829904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-9447ebb9.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4693dbdbdabc829037bf3cc2206546a","sha1":"0bdd4b9f3cd55f993c46a703642a2c8201f05b04","sha256":"735b2b199e033837c3df751e7b35c70f5b73a182be948320987ec1cc934eb4ae","sha512":"1ed7921631a3274f9ff1a8d9bef6f4aec942391eb10221fd2ec25431211f71899769b0cc2ebc6b2b183f3af03d08b60258bcf0e4fcc08931fe806fa045960ae6","ssdeep":"6144:Y7KwccufKh+GkeUe25e22rbfdn7e5adR0mADU0h+ApwZ06E9kt3pHBAu4:dEufKh+GkeUe25T2rrte5adR0mADU0h1","tlshash":"393407957302b13683e256d2583a0506e2356a48354789acf2fc4ddf3d6a98a71fff38","size":238138,"data":"","first_seen":"2026-03-19T19:50:42.651312Z","last_seen":"2026-03-19T20:02:41.832377Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aba4ec93fac116b29a1160f054433b0c","sha1":"074f7eff3a31e6e76f3c1c71a3a438820b1a4ff6","sha256":"322269fa55952abf7f02bc4328c85cc004ce4ec3a805b2a1a74f9041b66b040b","sha512":"892ffdc4a32896aa0b37136d8d0ee5b5d484f6411f4db50840e19f1d3d37283f61973896933008f372555381134c7110bf611faf67fc21f37450a267fa6f441c","ssdeep":"","tlshash":"1911abfe191aa4296303804e976b7901643260a9001a184177cc9b9dbb9ab7ee0cfb8d","size":1048,"data":"","first_seen":"2026-03-19T19:50:42.703809Z","last_seen":"2026-03-19T20:02:41.857448Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/currencyItem-77af3258.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"47de42e397643730b65a89d2bf413987","sha1":"d6e64ee8926e044d7504fbb1f65e18cdd4233b0b","sha256":"4b6fac598414c241e9aecd9347449adbc1231262a8beb2259fb130aac05cfe81","sha512":"6304e828a284bff72ce57d9a8df3e76963eb780b44e24d4cb3ef3235e0780b2e7d302efc645fa03140346cdb98e6c21bff7043e790e974cad40ad192755ff69f","ssdeep":"96:S/LwTMZ81StulBdyRNuUl2D4PDTPvUSWNPQVIwk75sR5c4qkq0pJOGROB6+hqpnB:S/LwTMy1StulBcmGPP8SqIVIFlC5clBQ","tlshash":"65c1c672bc207578d7b4488088640122127ffbc5f062ced2baae58593f23f49957edd2","size":6102,"data":"","first_seen":"2026-03-19T19:50:42.674712Z","last_seen":"2026-03-19T20:02:41.820208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ceb2a88e5732e6c186c20639b607d81c","sha1":"c66447436451f1d1da8acc821c7d958a66003394","sha256":"33394136e05271bb8f1fc1d8eb3884e64d6ed66f7cc275736fcae1ee2e1a08c2","sha512":"08766b3305e8fdfcf7d472d82e9c7b22f627536521197f39835b8cb5cf1e213198d044212a637e8d685b35f294cb328288e5364f38d86f0b76423135a15e918f","ssdeep":"","tlshash":"fdc08cd4a0c72d001602755590af29e490348027704c5b53ccd4dc493e220b08233ea8","size":145,"data":"","first_seen":"2026-03-19T19:50:42.704956Z","last_seen":"2026-03-19T20:02:41.847071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8443ee30f276e3119935d646449f99d0","sha1":"1ceb9129096006793b134edd28c2ffc023c60ae0","sha256":"812087a7c4ce777a2d5b776198d8afdbc79d1e9863063255750eeae83bdbe35c","sha512":"a8b4be6fcef5c30eba8bc4738b94f0a28b2ad7355b8e0b6314151e04607d7931a7527bdfe2766b83b93a5444904eb6742be2fbf2adb647ae62b59f4b570e0438","ssdeep":"","tlshash":"f0c08cc4a0d37e005612651150bf24e8d0244026704d1b128cd4e8983ea20b08233e9c","size":145,"data":"","first_seen":"2026-03-19T19:50:42.705976Z","last_seen":"2026-03-19T20:02:41.8529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"696f7371e7e22c8571a7e6bb5ebfcea8","sha1":"e5c63189afabec5ecddc1582ab6a516b1d6854a0","sha256":"9bd2a7ad6b663f7c0ea23d050c0ac03dfaf97facac23d902fc761f6b8ad6bf66","sha512":"2bfbb3c9348ee7fa3321cfd56f754ce0f355104d84d972477cddcaad905b7975ab679580789a2742d5670dcb15b6fefed6572b777e4d09a71bbc61443364790d","ssdeep":"","tlshash":"94c08cc4a0d26d005602652011af24e890244026704c1b028cd4e8893e220b08233e98","size":139,"data":"","first_seen":"2026-03-19T19:50:42.707384Z","last_seen":"2026-04-25T07:58:02.406859Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"df2fad0185e628505709aadaf190512d","sha1":"77f08eecb4c676684d4fb62e482bf2a753da0872","sha256":"bf14abb447920b6d65faec9770324262468d222fc5f5eed274ad0eda30487bb0","sha512":"d92bb48270ba24c6a1ec32a56dcb276b1d57d5a9352f6cf93b605ad663c4f8ebac149fc5ba2f472dd3e7e1a845dfac484f0612ca6d15d23160f4351a60488c24","ssdeep":"","tlshash":"a1c08cc9a0c26d041622641020af24e490244027b0481b128c94dc582e220b08237e98","size":139,"data":"","first_seen":"2026-03-19T19:50:42.708416Z","last_seen":"2026-03-19T20:02:41.84239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5baeaa7762df5af01d3abb349608e26a","sha1":"4dc6b5a7a8b2197eeaa9b1ad1a243f3a0911752c","sha256":"2a3bdbc8b72e26192aa0a2363746bb5a2b7d8fe1dd790cbce27c5a1fb8400302","sha512":"e9875ef7069d70bc99507d1cdbb57e7e3a6db09c6f25d4982cb2235d1bc3205218d5a2b784ea0719c28310528258e64f09f966394a43519cb9811e4a9fc4cab5","ssdeep":"","tlshash":"b4c08cc8a0c36d101706691021af24e89034406770481b028dd4d8692e220b48233eac","size":142,"data":"","first_seen":"2026-03-19T19:50:42.716818Z","last_seen":"2026-03-19T20:02:41.877176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d3196f147feca70f07f8b271a7cf2930","sha1":"0167b79ddeceea5125e30d6b62b9d031173d4ca0","sha256":"63c4cc9160b6950abd0154f0f41ad71238e7fd6acbf2645f59e76086e1a8e2c1","sha512":"80a50591de02e41a1c345d34727b6689864650489d035618f7c2a0af1ea8b99ba60e54ba10036008eb8f122a2145dbc1cddc3ca3683fd1fe1d8f96a6a8a21d16","ssdeep":"","tlshash":"e0c08cc4a0c3ad111602652010af25e490244026b0482b038c94d8482e620b08233eec","size":142,"data":"","first_seen":"2026-03-19T19:50:42.717747Z","last_seen":"2026-03-19T20:02:41.868323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ae6cd5888bf098eca87169c6c8388e06","sha1":"cc5e4e4c932c002eb1da99442137a1e2dedd4cf0","sha256":"4f9145540842484153b1d49b1b1565f185dd97b1584847f52685e31509b4dc5d","sha512":"50ba7e040fb9e946a869879f8f73f4937ae8751911db2ccc20d3a312da2168c09dbaedfd62f1f546a0ffe116797b0f6e02f51c25021d704a2f515abc9a39d666","ssdeep":"","tlshash":"d8c08cd4b0c32d001642645011af25e49024402670481b438d94d8492e220b08233e98","size":139,"data":"","first_seen":"2023-07-07T23:43:46Z","last_seen":"2026-07-05T13:55:49.221587Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"88d49d23d2d5162e3d18d46c7c936a1f","sha1":"8afc8e75983d794d3b56d04185a8a9170bf66975","sha256":"fb21fea115368e2f6e67f0e9e728d5dfa0610b1e0447c86d24f3ae11dfc6e268","sha512":"ce3e2df5b32a1a4788994a6a7d70d2caec84508b03e12506fb2140b63e18dc14bf49ce2084ec18255d293104693ee60498caa45f7cefbcf9b9e5f6c069be1b1b","ssdeep":"","tlshash":"b0c080cd70d22d1055055460547f64d8e028481af45c7b128c94d8552e120b49237ed8","size":154,"data":"","first_seen":"2026-03-19T19:50:42.719538Z","last_seen":"2026-03-19T20:02:41.872583Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a460e62622d6eab8d7e7cda362cf50b1","sha1":"902f1d76e7528850a2e37e670d7d692a9e10b8f8","sha256":"12d7b6b59c86e68034343634ecc14bc42afea1225f1141f9ca600a8b13141e0c","sha512":"47dc60edc91e37663e49ac8d223d1b6d305f07b41e1c01099dd171da717757c95cbd39d492c503027f6e917248584043543fee7ea12b8bd4eb50613939dd01fd","ssdeep":"","tlshash":"82c08cc9a1c22d001602681110af28e49034842a70481b028d94d8482e320b08233ed8","size":139,"data":"","first_seen":"2025-07-12T20:24:33.332157Z","last_seen":"2026-03-19T20:02:41.854199Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ac377d28c50392365decb9e5356bc4a4","sha1":"6fe41e404be75d726de80446ef8fc5cf3edf7f95","sha256":"b82d85a7b276c4165de0b02b4aef00c98398e0be1abf7c70f4b1ebb691ce0306","sha512":"e0db240c7aa317a0a8bce7f76e36a2399a01a5ea88c335fecc0faa12fefc270f9029b3ce8bddabea22373c4124101041ac15762e481358b88787450a0f67ff3a","ssdeep":"","tlshash":"91c08cc4b1cb6d001a12651110af3ae49034882b70881b12cd94e9493f270b08237e98","size":148,"data":"","first_seen":"2026-03-19T19:50:42.721788Z","last_seen":"2026-03-19T20:02:41.876064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"24b895380faa5ed4261d5d549d9d07d8","sha1":"dd4a4c06a9e45f1cb3f753ca3df63b6b575710d4","sha256":"156f60f0cd89e4fa198e540bdef0f51eed092513a6ce5770207128041563c758","sha512":"60631d60b5df075d8602dda699997455fc986b0f1000608ec232b39605c19b304602d547862eae87f0f8e41c36f02515a2485b2387ee8cf7b0a840cd3e29a9f3","ssdeep":"","tlshash":"32c012cda1c22d0455356530606f35d890248c26f4582a138d94e8952e220b84237db8","size":163,"data":"","first_seen":"2026-03-19T19:50:42.722854Z","last_seen":"2026-03-19T20:02:41.842968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c458fa31300062e807bf44c71b2ab5f1","sha1":"1827dd4d17a981cfc9ddd7cff290465f5104c976","sha256":"4c6346bbb62ad638a69773953055728c0af5e2c6928ea8dbb2de6486eeb8bcf9","sha512":"a3ad80dce974daba0bb8dc25411bdf31428f38ff1577db8b26337e97bb9ac252a376d0a7f4fe67de80b773f5f137561c4d3f68a608f434ff8997656fd1229c64","ssdeep":"","tlshash":"3ac080ccf1d26d11160164a0117f35f4d0298426f44a5b17cc94dc583f664f45137dbc","size":166,"data":"","first_seen":"2026-03-19T19:50:42.723795Z","last_seen":"2026-03-19T20:02:41.849512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/vendor-f43db9df.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9464f5d0ee35f88d7f8b0e60ecc94a8f","sha1":"16ac4f9f73e0e2548870d4b215d0e16110997410","sha256":"b14a577fa98a858ede8fba2d239765ed68e496699e22d22b56d946a04b487299","sha512":"c274e0bb1928371696c8552f294efbc93a1b458d42965dc453e138b09add4be4adaf33d1700c76a39878e9b2c8725218e619eafd89045897bbadc1149ed5e0c8","ssdeep":"12288:NAb1K+srMgFxlaWDUl0wde6xvNYQnwjoTlvuXVYWlGszn4YCtT:NAhIlvlOl0wdwQnCgWVYWlGszk","tlshash":"ed1529c97692f06147ab24e240bb0102f3396e59740e84a4f1ad98db7d7ad89d277f3c","size":947292,"data":"","first_seen":"2026-03-19T19:50:42.673283Z","last_seen":"2026-03-19T20:02:41.828752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f25260fc4545fcdb29b4c06d4aa203fe","sha1":"ed171b339c0ba517c435ddf1aeaf4b53eb3d39ed","sha256":"f66986340838a2a6ea9f79090707de8169d726cb96d6a5ded86e9e00e2f3b061","sha512":"65389d015b51912abae6ec2ea4643156d8de06e3f0d1dfdff43cce6e79ba56fc54dccdf62ce18b862b2a6ac0a4beceb5064bbc0a57f8158c573fb77e1dc71a15","ssdeep":"","tlshash":"1fc08cc5f2c22d202606646060af24e4a028442ab04c2b12dca4d8583e230f49237ea8","size":145,"data":"","first_seen":"2026-03-19T19:50:42.724707Z","last_seen":"2026-03-19T20:02:41.854797Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"112699fd79dbc7a06ee8e3b65e71a8a6","sha1":"09617ab21a680ab890248f5ba68efc8a6e36c07c","sha256":"16fde2fa74e5ad9f692b32ee965c2c417327b2852715205dba87c2c0436583df","sha512":"9c31f1b64c16655c9914f1e646110e231d17104a4fd54dda36faa88cbd294460aa62117322f2c74ac6ae1fd0e9f2ea2dfc019421f24c9a072f328b173776f4f1","ssdeep":"","tlshash":"9ec08cc5b2c23d001602751011af39e49025482a70496b42cca4dc883f220b48237edc","size":149,"data":"","first_seen":"2026-03-19T19:50:42.725779Z","last_seen":"2026-03-19T20:02:41.878323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/charting_library/charting_library.min.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-09T02:30:21.1711Z","times_seen":1300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b70840686ed9966cdf9dfe7f8eae0261","sha1":"e523a1149f1aa2a11d1a0f3b5df30b4596c81faa","sha256":"eb84103176a13a6d59353707fc4f66821f1f638b92628fef2fd686b9ebca5e72","sha512":"d26a0780ce906116b61ad8f020e08544c4fae0bed0756a48d079afd6c76409dcc5efa619586e9f53e68d94b1d9de5e03a630d3534e199942b6f64dcb0be5c2e2","ssdeep":"","tlshash":"02c08cc4a0c32d001606641020af24e4a0244026b0485b028ca4dc692e220b08237e98","size":142,"data":"","first_seen":"2026-03-19T19:50:42.726861Z","last_seen":"2026-03-19T20:02:41.855456Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e4b61bb169d0b8261ec4712785ccc476","sha1":"fc283b05983de7fa122b647767b08faff3fe0fc5","sha256":"ffccc1e07babfa8953a7bce262d986c1b0b8ab7f8aa757d44c9f4bc71e46bcdf","sha512":"74c13d14da9e074f58ff1cb58417566e7f7aa888e14d159f42a5b90e4679dfc96a73fd27109c7e67901b3068507a45989bf7904e6cb6bf867a3f3372d9474af2","ssdeep":"","tlshash":"1ac08cc9a0c77d001602645050af74e490244026b04c5b46cc94dc9a2e220b08233eac","size":142,"data":"","first_seen":"2026-03-19T19:50:42.727817Z","last_seen":"2026-03-19T20:02:41.871956Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0b7836da178c83e57d296d492e64e746","sha1":"09686706e407fff139c7d11f486fa06573f32c07","sha256":"969c557519fadcad34e683aeaf007a2e9788841a8b028d7ca6f9f0a065913ff9","sha512":"f4afb8e793688c4453fe828f943ac44486262fce2d4e66ecbe245a2ade86aeed70fcd29f1ab83b26f3faa97556c7dc01547438c93313232c7bef694947200ed6","ssdeep":"","tlshash":"ddc080d460c66d105945651454af25d45024403674485b038c98d89c2d520f44137d98","size":148,"data":"","first_seen":"2026-03-19T19:50:42.728784Z","last_seen":"2026-03-19T20:02:41.858722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c2fbbd896a2b99a9b8b30b83c526df86","sha1":"5f12d1792660313ddc0f3f3990acc49c89cee804","sha256":"2854ef7bccd0b21c8b22d8156f06c38cd4ace8a11149789fcb20ac3d026ce635","sha512":"a4faba50c11888038181820898375197c26542626e2542d7a8493614fedadbe27a9c50053a2d57707c94f844b53422c13d8a9f1b9c95bba75cfb986b8984321a","ssdeep":"","tlshash":"0ec08cc4a0c63d502602641120bf68e89024402670481b038d98d8582e220b88237e98","size":145,"data":"","first_seen":"2026-03-19T19:50:42.7299Z","last_seen":"2026-03-19T20:02:41.874096Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c0893c1fbb646b35d1036fc776e33fa","sha1":"213eb7c2928b44e925735b35a1752139d288e8de","sha256":"1e120f598ae4b621fcad3156bdadaff48855fe777fc1573be8a4c9951e320cd3","sha512":"a1eb08578e9027ae6c6c12ba94c472ece5760e7c04f316a95deab5878107c60606c5f755e967479ce6afc5d15a5235fb80e0f7f815660a1174d7190e4a718743","ssdeep":"","tlshash":"12c08cccf0c22d015606a47455af36ecd0244c2ab8496b139ca4d8483f234f88233ea8","size":151,"data":"","first_seen":"2026-03-19T19:50:42.730917Z","last_seen":"2026-03-19T20:02:41.850536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba9bd42c89ec82614a8315e87c3e19fe","sha1":"ccaf3d9a7f636539eab94ce814a8d649e29ffbc2","sha256":"9aa8c7a8405cea87d9e97130d5f9f785b7ad50a77c5967220d2565430090b673","sha512":"6d0c302e7bf99ea3355af803d48adb5197a10b48a93f692c3de47e6cc90eba13552b454cf6c98b82b1d56ce5133928a713725265faa7cab1f44b6ce712646381","ssdeep":"","tlshash":"8bc08cc5a0c22d201a12792011af26e890244026704c1b038da4d84a2e620b08233e98","size":145,"data":"","first_seen":"2024-08-20T16:42:48.086261Z","last_seen":"2026-07-25T14:35:33.39446Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"db249be289579d6b2703563add876a84","sha1":"bce95523a8142d4e1201eb6710c84fb587b81cb1","sha256":"082c4f3229bffa8097fb317c70d85b4af2aef07bdab96895e5eb96d7eee1e092","sha512":"9db3b84a0b262bffdeeb12f1249231477dad5e1628f6e0b1fee0cc37383b1cf103bdd6a52aa5eac68da56fa94cf1e4a4da5e90a28c08eeaacea48c9b53b12e4f","ssdeep":"","tlshash":"2dc08ccca0d32d009602647491bf35e8e0244c2af89c6b028c94d9482e220f88233ee8","size":151,"data":"","first_seen":"2026-03-19T19:50:42.732826Z","last_seen":"2026-03-19T20:02:41.84462Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99d0e8026c42f87667d17308a2c96695","sha1":"5c2e5e12202907740c41dfeee57cfbe617a52d17","sha256":"b8a198947a3ff8b442d9a5a68caa24b132381a953ddad54f902f72d81d21f9f0","sha512":"3a236c92ea7ffdf66b25183fc7c1c3577e33974ed858b605e14939a7c9df7760c49b5adbef995663c37efc63cec2912231277de20fbb9465327f3e414aa412dc","ssdeep":"","tlshash":"51c08cc4a0c23e202a02641120ef24e89038402770481b17cd94d8482e270b88237e9c","size":145,"data":"","first_seen":"2026-03-19T19:50:42.738351Z","last_seen":"2026-07-28T18:34:14.3811Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"973aade58b951198ea5caa1da3cf3ce9","sha1":"8dac8b758a18479b104593ab8dbd38597875c68f","sha256":"07ca2741836c1f3562b5e425457981fc3f3812d6a9542225c799a6a7ac2efd21","sha512":"78683ef247367567d1f883f71dcee1d352135ef1444d0857a13b03dd24ba763de0f43c5707768427f421b5f1d409ebc15c7a6f5605578e9fbb7f70464ee176a8","ssdeep":"","tlshash":"3ac08cc5a0c36d001606642110af64e490244827b0486b22cd94e8482e320f08233ea8","size":142,"data":"","first_seen":"2024-08-20T10:37:58.657588Z","last_seen":"2026-03-19T20:02:41.867179Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-fe73ef38.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc15135aeb93d7b836127f35f0d862cd","sha1":"7bb8528fda3b8e57fde2800588af34bb51536ea4","sha256":"60164857636603433949c942d52e1bb1a467b97e1e75ddd6e4940a9d958c6e85","sha512":"92fecf2c7c6e5a7f9ce783e8288e1eaed697a3f235749b835877af15b18e0b6113bb1ab79ea7fa0c53806afe49ef518cd15910516d52f7d64e1b77da121ac8bb","ssdeep":"384:5n9lMums6BheNe0zAgk0IAWTsQGU5aXj6T8QYGzAzT:5nfMumFh+zDIAN4aXjYq3zT","tlshash":"4ea25619bf156a3de437a09c820d7164212e3bf5b20d8054f7be0438db29aace977797","size":21651,"data":"","first_seen":"2026-03-19T19:50:42.662795Z","last_seen":"2026-03-19T20:02:41.807463Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-09T20:49:56.13325Z","times_seen":41281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-07-23T13:46:57.365576Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ef1934aae979efd3aec6952b9832143e","sha1":"3257bb2f019def118018fe274a78117498c130ee","sha256":"78ff51e8883c8e73548590f8ca076ab48e0f3f3e93908168bbacced680ea8aae","sha512":"7c5f1c0b1bbc0f820328ae0908edb4a25078d09a499db3ab37ba90617787aec7dc68ea94af208898649badb54d8f004aa3e950ceb19f8b7dec5716cf2224ac37","ssdeep":"","tlshash":"54c08cc8b0c22d001602641010af28e8a024442ab04c1b12dc98d8482e230b08237e9c","size":139,"data":"","first_seen":"2026-03-19T19:50:42.745527Z","last_seen":"2026-07-09T10:12:35.149285Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c26d367eedd844b29c7d84b849a1a7c3","sha1":"dfe06487de26b5986e821dc4a05a2bb923ac3359","sha256":"aab06100511d975786b089cd19cbdc7973bcfbf96416fe59ea968f6f0ac0492a","sha512":"4a21dd4512930e002cbc027c45ff74c83c0efcfb2dffad92c568f1b328b71a6d82124c76d23d986111ddee8343ab51f8e767fc43fb99f157a5499e8eb6b3cf63","ssdeep":"","tlshash":"8ec08ccea1c26d105a06a43454af25e4e0384836b88c1b029c98d8483e220f88233eb8","size":151,"data":"","first_seen":"2026-03-19T19:50:42.747175Z","last_seen":"2026-03-19T20:02:41.844058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7fcfa794815fdab0319ce38c84cf8033","sha1":"528a2fc994ffcf454d69a38b99801a3698fcbade","sha256":"c24c20a0f1d790583167baabcbd90565f57532bff01ba7466c3bf35282ee30f1","sha512":"4c1996b0dd566523b59a9b02f92f12dc75e431a8f1cd87092d31427fbc68023778a475305d00a08771af87ca32156b406c97ca3664938ae449f3ba232c72a178","ssdeep":"","tlshash":"21c08cc8b0cb7d001a06655115bf68e4a0244026704c2ba28d94ec982e220f09237eec","size":148,"data":"","first_seen":"2026-03-19T19:50:42.748479Z","last_seen":"2026-03-19T20:02:41.856174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d994fdae071c8d3c25da8f86b6d8c4ec","sha1":"a70696437310cea9bbc7e5b5b5f77fadb1e3f210","sha256":"ebb786e65260a124e59d9c26c640b076320b95ca19a53547abf3d7bb56af9f34","sha512":"dddc7f5632eb87315f9543aaf0293ff7564749cf7d5110d242fcc709dc4b03451ef2a0df6a3e94b648001ba626fb678309dbc759c546c5dd96872114bb522318","ssdeep":"","tlshash":"9cc08ccce1c27d102706a46014bf38f4d028442bf48c1b438c98e8483e270f48233eb8","size":152,"data":"","first_seen":"2025-09-12T15:54:17.468561Z","last_seen":"2026-07-25T14:35:33.402307Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a998ce42f9b03ca6c5386690349c7dc5","sha1":"fab527817b79f518a465e9cb5b16a85fbaf648f8","sha256":"48a08d904f77b11053778abf6e5b183a75bf638ee1ad9e49b6e3bfe34584c70a","sha512":"08bc8e7d549129c1b0df4fe0fc457b3e10bfb78f84750a4d8ac566a3b9c82725a8a78c3c0283b9dfbc22d32c6581f8ff3a30d59446ffe40ceb99898195677eb5","ssdeep":"","tlshash":"6dc080cde1c27e0455425450117f24d8d0244c2774481712dc94dcc83d130b45133dec","size":156,"data":"","first_seen":"2026-03-19T19:50:42.75042Z","last_seen":"2026-03-19T20:02:41.866542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0046f9cbce57a83f419b4b588b2ac47","sha1":"8e12d2dc5ef990c3ce0b0c66d3320a6d04f33e85","sha256":"9a38f2b9c160cd7bb1e67d985a6de08bd05c95c4ccacda762d61ab0ca299abc1","sha512":"1b5a63bf9b8d5eb216da57e6e03cff333fc176d0aa7ab0a06151b308f3de59d0746b2d53803ead062f75a4b56e9e7c3955f8c950730f2530254f5971d6df7dad","ssdeep":"","tlshash":"4ec08cc8b0c22e101602651010bf24e890244426744c1b029dd4d8583e220b08233ea8","size":145,"data":"","first_seen":"2024-08-20T10:37:58.684195Z","last_seen":"2026-07-17T15:50:59.131428Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.78001Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"333fdaf0b2783bccd33dad03126ac9af","sha1":"8212480abed3bcf218e6ea50e811eda86fdeda10","sha256":"1b309314302b83f69f0ead58784b4ef5ee0e3c8ad516e1953dea3f33b7281a58","sha512":"07070dc736397a72cd9a8188fa28b9156f577ce4c029182e1473b8ee05d4bb8c22bcb3f2a1cc18cac88b5e6fe78d6b25341cc3bc7140d0e85715da77bc5b3731","ssdeep":"","tlshash":"f3c08cc4b0d62e001602651010af74e49024402ab0481b029c94d8482e220b08233ed8","size":139,"data":"","first_seen":"2025-07-12T20:24:33.313891Z","last_seen":"2026-03-19T20:02:41.856823Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8c55f6c1a10e3ee2ee2d744c39856638","sha1":"6b1ea01bf0a8d7a366b82d6c12ed9a4ab7833356","sha256":"4ddb37098c03d4375cd01d6a5e2e73d615b39266c1a477d92bb61cdeefd7ca35","sha512":"9d9106898b79a299f063b1fe4ee2bba746b01ce703f77e24b69d55abccfe3a2002dc7a09108590d341325b1d45225dbda372a564a5ced5ae54937c74d26b64c4","ssdeep":"","tlshash":"b4c08cd4b0c22d001a02651154af25e49034502a704c5b038c98d8482e320b4c237e98","size":142,"data":"","first_seen":"2025-09-12T15:54:17.459197Z","last_seen":"2026-07-25T14:35:33.369034Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"25d3d80990917cd8bfbb3709c360ef9a","sha1":"67601390d5408bc774242960a5b23f7536f6b346","sha256":"ade4bef48bf9a1dc2a9464ad0043dfafe3e7cb963051e1d9e967733fa552e8d8","sha512":"4841f6f6fbee146afaed62a793f406c4785271cec31d0d1601f5eb6c232f2ff4523f9b014b3311905c65cffbb26b2c910f6cfaa47a745c60f661bfec294c5d04","ssdeep":"","tlshash":"68c08cc5a1c26d001e02655050af24e4a034402674882b2b9c98d8993e260b48237e98","size":145,"data":"","first_seen":"2026-03-19T19:50:42.755211Z","last_seen":"2026-03-19T20:02:41.865269Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3df82affa0ebc14c927db4b43660c9be","sha1":"6acc41baf06563dce0ab2243cb9e17d68c8f9ac0","sha256":"8d6550728757caafb3ca6863240e9b2e9ccabad6c8c60c2e2cdbb92f248ad3c4","sha512":"6b857ea669aeec817b5ac53a47da6aeb85985f541fcf94214c5fb8b4e57db71b917f578460071a2aa36b3c27f235409772085772c9cb1f888a6f19536f0bb7f5","ssdeep":"","tlshash":"dbc08cc4a0c32d101602656024af34e49024402a70882b028c94d8482e230b48233eac","size":139,"data":"","first_seen":"2026-03-19T19:50:42.756294Z","last_seen":"2026-03-19T20:02:41.862124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7dc8dd4457a8aefc53f37b90813e15c3","sha1":"d98a8d4b2dff0dfe8051afecac68f7f204468629","sha256":"f4208c7114d0023b76c5a320753e13ed97c43967bc315bfbe7ba755a7a429b23","sha512":"8c48b166ecda7f2a2f3760eccfe908f38b14bd8f1ee2a2873c217c3abc37444f3df764b7baedb3ac8ebd4347afcaebafe7c987e81a607f2a320567c291ec5ee8","ssdeep":"","tlshash":"3ac080cca0c32d14562155b5517f35d49035cc27f44c27028c94dc5d3e131f48133db8","size":157,"data":"","first_seen":"2026-03-19T19:50:42.757386Z","last_seen":"2026-03-19T20:02:41.859396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bbbdb43ade58ba186b343b1a422fb970","sha1":"55eb1ca4e6ea2713681233dacbc7b9281f5861ea","sha256":"c6190b23d301621a63d35f73dd2a90e9db598ac697cbfea3449d260e5c3e6fd2","sha512":"b65dd3618ee250bece34d951d64ce77dba63c5b19d5e83ccf850cf9063d1593446c82fd7ccc2e5d5997d8dce149b2e6d5c2e8b37a6132a523ff3b9922fd6253d","ssdeep":"","tlshash":"89c08cc4b0c26d002602641811bf38e49024402770885b138c94e8d93e220b09337e98","size":145,"data":"","first_seen":"2026-03-19T19:50:42.758434Z","last_seen":"2026-03-19T20:02:41.860852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b4cec3aaf1aea7d6a1f9a0a96fb81e15","sha1":"09b20b164b5b595c8543922e516a06aa91e19296","sha256":"94da489cd6b8a2a92188e87538781ad96154623f52605d736ea0afbc829b5344","sha512":"827a519b7a06f12481b853b97a6f463384d8a6a3812d56d1a0f0bff92c4984ac81af3b88969f3fc99909c433f99c3fe174ef350a83307fd7240126db44567432","ssdeep":"","tlshash":"17c08cc4a0c22d101a02655020af2ae49034442774481b029ca4d8882e220b09233ea8","size":145,"data":"","first_seen":"2026-03-19T19:50:42.759522Z","last_seen":"2026-03-19T20:02:41.871334Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0c1f99be6f07905d8e380e20d7bda15","sha1":"457342ce29f5c60a84b670165f06f2c82a74a402","sha256":"a85ab133b4a9ab0cc03d759308438840171ae13b1fc1b96d2379de049427a684","sha512":"07ac21ad1a16b3f878d6b27719498cc40f63c49c9eb4391d88fc9aafdb5f0f395c428a18f03a86b033912436344f6d7085461314b8b78eb07dc9d2eff527027f","ssdeep":"","tlshash":"32c080cc70d67d005e036550157f25e4a035443674591f528dd4d8943f671f8413bef8","size":166,"data":"","first_seen":"2026-03-19T19:50:42.760546Z","last_seen":"2026-03-19T20:02:41.858084Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"020e292d34f581f46d61e8836523fe67","sha1":"346baad4da13dbd6d705a2f9a72d8a7eb0d6f3e6","sha256":"cf65fdc5898ac499a79b0e8da62330219505afc5d23321559244dd644ca7d26d","sha512":"83ec369f79acde6d6e178ba67b8b242fbed2900cfd124430195bc06fe173e9b9e24ed225d7615494a94255cd43ebab35a137b0f40f730e9bdabc9e4d64a2e102","ssdeep":"","tlshash":"c6c08cd8a1cb2d005a1a6464a0af35e490244027b88c1b42cce4e85a2e220b08233ebc","size":148,"data":"","first_seen":"2026-03-19T19:50:42.761737Z","last_seen":"2026-03-19T20:02:41.865898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/ja-8b4a106a.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dc7cb9248ebe65898d0b7e097d48803","sha1":"3f30e3986388adf7fb419d5bb43d0aac855c4b6c","sha256":"7fac48666f840061d83ceb6773b5c397f8083c256995950715c96b40241d54b5","sha512":"e9c892df4acf63c5afb0c129e0101ebefc5d501a5c3f5efa48d9004d604f40cd31ae5dd5c4da34bc886fe1ed69e9fdd870acdb6af74490341d2441ac1deece1b","ssdeep":"768:MFuzzADVbvCywp8Hueq6C3x2U3mL8wgGPvbaEIumJu:MFuzzADdzYS37C3ZmYwaEIum4","tlshash":"9713e9ec9fde692944fb9233614e698050b24c8dc9a196a64ffcc9b4276071fe343e74","size":43169,"data":"","first_seen":"2026-03-19T19:50:42.654602Z","last_seen":"2026-03-19T20:02:41.830967Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9ef0b7f596d8663c6c196eb5126b0957","sha1":"4632853974eaedc65ce3fdc34554b1cdefdfaf2c","sha256":"8eb04cf0b9ab988dc7a873ee6153e6deb666beedbd49481a9eb511793b558920","sha512":"b941d51b311ba69a7ad5214f2828019ec795439bc0877d7663758816e444cf7f7811f0f2ae9622060aeccb4f3664ff1dce0065341349b57fdad3124b05a00935","ssdeep":"","tlshash":"3ec08cc4a0c26e002a12642070af24e49024402b70481b028ca4d8482e220b08233ed8","size":139,"data":"","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-03-19T20:02:41.876612Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7f0f55d09d3073bab07a10c19dddb5ed","sha1":"802732c481ad2b660d4c902ff56d8a13d5efc6ac","sha256":"f73ef50d9c636b1577ac91cd98ffc8ad3b5ba0ce49e41aec65ca5444a7c942d0","sha512":"74fc5c3d88fcbde0b94a2067fd064134d05acdf9a61cb3bf0cff0c9b4cab49e7e5d6afb433881559b866f73f5b5a8ae53fa39c5b50358d20283cf927aba1ef78","ssdeep":"","tlshash":"81c08cccf2d26d012a0664a010bf39f4e0288426f48e9b13cc98ec583f264f48237eb8","size":157,"data":"","first_seen":"2026-03-19T19:50:42.763795Z","last_seen":"2026-03-19T20:02:41.841805Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7ee472fc0a8fe9d07454659eb2135a4e","sha1":"b8df51cc7c9e58038af4742970b0898496028510","sha256":"9e8388bc2c954267db5e00d1ed87e039ccedf92d8643d0537bf3c3ce5fcbedf6","sha512":"556517e6e3ca3cd96ed6a285284a869f845e8219a5685f04e1020959373bbeb0f2018fb36960611a4fa36464bf2718d9bbb6efac957f5d5f072c28411e8b319c","ssdeep":"","tlshash":"46c08cc8a0c22d201a02691021af25e89034402670481b028da4d8492e220b08233e98","size":139,"data":"","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-07-28T18:34:14.331153Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5246f32bd6ad07c2bef04f5538d1db41","sha1":"5df84db6333cbb05b36ddd99a845b46dbe7f3c4e","sha256":"8e0d3353789d05ccc80df9599d380441095aaf463b011d9395ac4f2c7f1f0b42","sha512":"fbbabfa0f642fd30578fab622ceecd50198f64f38f1b0e1fea1028fb5e54ba3fb160ba920296c1f6539b891067de7e8221a814d5490d81fbc47ca5ad546ecb8a","ssdeep":"","tlshash":"9fc08cc4b0c22d002602652154af25e4a0244026704c1b038c94d8482e220b08237e98","size":140,"data":"","first_seen":"2026-03-19T19:50:42.765738Z","last_seen":"2026-03-19T20:02:41.843496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c3e09951af328722c0a7c7b7bbbacb8f","sha1":"01c782f272bfbaa70ed5c634fdbc027502b88017","sha256":"ec7c6aa5736d28cfd0a81d8c338c7ddba286cce5bd2148546c71f136efbf4883","sha512":"9c0841a32b4fe81259654a2378216579ece8503da42c5c3704f214bf54c1cc30f6b8a5ab6ff6c2bfbd63485bd6237f0ba00fa555402776654ac5fd9140a4d73c","ssdeep":"","tlshash":"1ec08cc9b0c22e102a02a91121af25e89038802b744d1b029d94dc8a3e260b08237e9c","size":145,"data":"","first_seen":"2026-03-19T19:50:42.766824Z","last_seen":"2026-03-19T20:02:41.864024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4ebe31ae1f8eaece4ad264609e2bf55e","sha1":"9a5f845f4e2d43413b198e3411b542adf3ec3304","sha256":"70df128c4e75fab2e1c0a21adbb90437b4ec9bd2c9cdfcc3706a26f7a167402f","sha512":"45a3af5d8cdec11cfa12802553927793a97dc7d713f8eb3768398d332e9a42c18a3503c779f1d5aa92e29fb29a0ee36b20d96f276969af8db23514d0068f0c96","ssdeep":"","tlshash":"6cc08ccde0c2ae001616682021af34e8d024482b744c2b53dc98e9583e720b88233eac","size":151,"data":"","first_seen":"2026-03-19T19:50:42.76784Z","last_seen":"2026-03-19T20:02:41.87071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"14befb4d262a38d3dc6425e251771d26","sha1":"5779451c00a6ca693255ef67a757fe256f32a156","sha256":"48f40e3afe492b49607e6399aac684a0708d18cf850d4e168ce756ad1402112d","sha512":"f21fd65ef9f12c92f1da2527c6feaf25ac3094d9fe269ba61a4c6a10b4713c12825608a69ac1014de0e748c17f1286f8c35d7e7d794832d133614b67015fe0ef","ssdeep":"","tlshash":"e8c08cc5a1c2ad042a12655850af38e4a024402670882b2b8c94d8aa3e260b88237e98","size":151,"data":"","first_seen":"2026-03-19T19:50:42.769007Z","last_seen":"2026-03-19T20:02:41.861493Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-09T20:49:56.133711Z","times_seen":42752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-1f3ac168.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c3b39853cdb2c41c38ea196e3fa4adf","sha1":"a24ce0a6ed79b2d94cc0c569bc1f3279b2d0324a","sha256":"1b8e04ee85b45c1b37da713f84a353bfceae4285b0ab77592064101c85c78d21","sha512":"e2fe84c7a80cf8bf7f9ba49c68a54b626e79154f96e35242843d3be81820214d2dc5e2cc1d8235aa5701c27d82faca5a61824d04b4580296df0f0f489a47a476","ssdeep":"3072:3Yw0mtP+AIpuIZcq6FFXKwgUmuO4BWQ4BW/eAYx2zIS9BwHsA:ITmt1I80cq6FFXKwgUg4BWQ4BW/BYx2q","tlshash":"0af36c5dab011ebf597e0448a95e2010206c2f9ae98cc8d3b2be4c5a27f6ddc7327774","size":171159,"data":"","first_seen":"2026-03-19T19:50:42.678684Z","last_seen":"2026-03-19T20:02:41.815035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ae34dc171e38f39a489ee3b7745164a8","sha1":"b2ae5888d85a57ac3c28036a1822acd342ac0d52","sha256":"da75a09b520f1abdbaeef6b1085200ebfe3f26d224263943548466ae329e0b2b","sha512":"5c383400db6df72d8922bf54aa22c6f797b17a29063f7d2289648f3cd5dff5e3a31287e550063e18ff372d9becf9b89bd3f3d479abe7a9d9504fa2d9e0ff1239","ssdeep":"","tlshash":"f7c08cccb0d27d005a26a42050af35e8d024842a74885b02cc94d8482e220b48333eac","size":142,"data":"","first_seen":"2023-11-01T19:36:21Z","last_seen":"2026-07-28T18:34:14.364317Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0e02615b1a361e0f12336588dd984d19","sha1":"15b1bcf51b7d4939f6c5ba31786e5b39f276896c","sha256":"25484e94788487d260475053d5d1523c3785f011996ae19d086f7906d9fcd82d","sha512":"7ff8f71a7d3ab47116eff3e7a392c28438e1911c45f16be997f376f462cf480577548ed62b84b65833ebb6c9135a7a78b434addd53a0f4d99a49647b4c0e9246","ssdeep":"","tlshash":"abc08cc8e0c37d00661a646150af25e8a0244427b8881b17cc94dc992e220b88237fec","size":151,"data":"","first_seen":"2026-03-19T19:50:42.771378Z","last_seen":"2026-03-19T20:02:41.86339Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"51c6460f269f319afdca09d0d695c219","sha1":"9ecbf08ed170ce000ba6c851097e3438f5f35845","sha256":"f6be41333658f60bb4d00576f7e876b9d5733eabbb030db3d59cb291b896fa82","sha512":"19823bab1636bfbfac74e15486651730e4617f222322346186576ff0824d4bab4aaf57eaef9f154638dfe2d6ddd84e7852ab9f65bf30fdcf47ef9955ac60e81b","ssdeep":"","tlshash":"f3c08cc5a0c33d001a02641161bf24f49028402670485b268d94e8983e620b49237e98","size":145,"data":"","first_seen":"2026-03-19T19:50:42.772654Z","last_seen":"2026-03-19T20:02:41.848938Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/#/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3ba076a0a9b94c46d1938b8faa4246da","sha1":"fc7bc0d1a071c90c5d0cc646679c655175c18e64","sha256":"b9e11f1202a3c9a6950b219cadaec3fb65ebdf268a452d881c99a41c346938b7","sha512":"dc8dbce6143bbfb66b9df71b5fef1166a65c075cbbaebd5af3496d0a259faa2feedd059276fdcf64a25e1c01cc7d70710ed1c554731371a57fb39ee457d1382e","ssdeep":"","tlshash":"11c08ccce0d6bd102602642011af34e8d024482ab48c2b03dcd8dd583e260b48233eac","size":151,"data":"","first_seen":"2026-03-19T19:50:42.77374Z","last_seen":"2026-03-19T20:02:41.868946Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-5387a38a.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-5387a38a.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-2591\"\r\nexpires: Fri, 20 Mar 2026 00:12:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omNPldjxV0oSYInNFp%2BEG2BXbBvdQqVXlfntHp9DGh3CPMlI6smsjE1YSSGdjJRAmfEa3RJgeiM0e1HXoGU0KpJ0ZdNw4IanjjuCD2yHtfNmS08Pg5o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e68af496b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9617,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9616)","md5":"bf3800025a9144c8001ad2b001c447c4","sha1":"23487ed9019b43d4a8366a9649727c138cdc89ec","sha256":"5387a38a042d0104cb62ff19cfb85464dece794ba64f60cdbfa584cfb3ed68ce","sha512":"9180dc72a1d4e906ca00d5629eef4ebde2c1172f6838d6609d103455970bca5b1c877cabb6055a2be022a68e97405dbd41c7d6c9b9c906b3ace528e7ae32c2ca","ssdeep":"96:rbVwAb9GWnV46yoohHZdVoqkutcYnE0jrJsA:mWnV4Ph53oqk90jr+A","tlshash":"8412dc1af2a4b3382c27c6892e5547fce504ff52c5118975e38f11b909db3e32e5a19d","first_seen":"2026-03-19T19:50:42.641706Z","last_seen":"2026-03-19T20:02:41.823546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":969,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getAllSetting","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:00.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17033,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (16545), with no line terminators","md5":"adc13bc0e4d375bf5a04b0e056ca4339","sha1":"2ae27c2cd4f46b88d1bb2adfbfc6ac345d22c678","sha256":"9ad935b17f33c4038a5a0dcfb16355e64949bc47041833eadbc26d2e01345dc7","sha512":"cdbf7afa8e7ec446fc39bdcf19de9b55b898178fe7df8543206e16e120006ed750521a7d7e936477496f87a9b920ed4974b73af9ecd6b421a421a1326928b446","ssdeep":"192:N4nJVxOSpQ+oXVD+RYlZjYePfWb+w/dSu2et5x/bNo82se7zbsaCziMqfdhyxtx2:7+fbj2/XBqaHwNQY9k","tlshash":"9572541736a8ccbd45c629cad0fa7d467ddc387bd190ac04e9ebaf5c9899971480b04e","first_seen":"2026-03-19T19:50:42.642877Z","last_seen":"2026-03-19T19:50:42.642877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uscc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uscc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/knc.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/knc.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-6ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzp5K%2BYbIL6UYJ%2FRRQJBYRCXaQvcrfBETevLxKOMrk3inuy4FYLwebCIEUWZhSqYQiMLC7ga9zUiYKe5bl8GnpLGDMaNRox1T%2BDaIy5LMBHDMDRE1IA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7d8e496b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"793261695cd297b75fd238c435667011","sha1":"92df569982ab458fb93524fdf536e772a48eafa6","sha256":"3c5b1ec70e591ef5b8bbace84cfc40dbd35b0eedf25f9d6cf26ff4dee9bf0533","sha512":"93baebf95e55a216972a248ffc90f91aa6d5300d80ea37bf5b13e9858ca5a0f4f75de1f1404b721b171c0822ba5db3a4f0728e04ce601412fffc592897fb8523","ssdeep":"","tlshash":"c331419ecfd68770d08053bcdbac54112a9a11cd318756c8dbd955b2fc385e90cc8aeb","first_seen":"2026-03-19T19:50:42.644877Z","last_seen":"2026-03-19T20:02:41.837218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/images//common/lang/ja.png?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/images//common/lang/ja.png?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Aug 2024 01:27:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66c54292-b36\"\r\nexpires: Sat, 18 Apr 2026 03:21:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWADD%2BGSDJtiA2OoXRmXz5nKTFT1cahxr7Ndod2swhE%2FWmrfFUejzja%2Fg11AUEo60evZXLn62JnlaXe4fdn8Vf9wtzmuI6P5lKh811tuOWc71XkNlv4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7680196b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"eccb28667ddea993d428dc94b688d4ee","sha1":"244e6ad735f4d4ad3a9c63a31a16fb6b61f2b4c3","sha256":"eee70b94b60a6117e108342dd2a8e13300161a7f7183eac16b0b4962d1f5e040","sha512":"4f12763490b69c2f3e1e7473842bb90cc290645b13d218397307c97217d658e4787759c4648c7ff6143d49d581dea2a685d5c850bf647de66467e42c4d6a7e22","ssdeep":"","tlshash":"b1513dfea68c15d0cc0f65ba4ac907475f55d2d69062b00d680f1537eeac90d9e0ecc3","first_seen":"2026-03-19T19:50:42.645927Z","last_seen":"2026-03-19T20:02:41.836037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1780,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/yfi.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/yfi.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-eff\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq8CXVlfH5Wqwr5bbVpb6%2FlePUIySIDelXy1DmVzLFGr3M2v3Qary%2BcnfC7%2BYNw2LtOhTxZ6J2EoPlPCy%2BgmkaeQ35iX06aOPScIKwI1Tiv8odAJGyE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7f92396b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56ee6df83b592ca7eec208383a028684","sha1":"05af8417154bdfbc3c564d3f54245f5580fd4cbe","sha256":"9ebb9b5cc55f6e60f1698e9b3241ceabef31f0dd28233441cfb0bc4b244c79fe","sha512":"adc55f76da8649048110bccdef60ae2d0b8883f188dc4f46fabd45dd41f04011482d731db7248bd53e1a2fcc0f8f86aeec2f18ae324846a9fb0f2103b0b68cf0","ssdeep":"","tlshash":"c581848d8fab876291c0b2fc977c5020748a01ec686296d4e7e65839fc2c1e84994de7","first_seen":"2026-03-19T19:50:42.647Z","last_seen":"2026-03-19T20:02:41.827927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/doge.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:04.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/doge.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65447f9a-9d87\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BAOPmT%2BrxOfH7uAj9N3PgGZNuNGlbRszFnY0Xr42wa1ykJ8v2g3NOuD4%2FqVQDIfxtBNaRRq%2FarW43X2bSglLfUBSEVPTuRCN1AIU8t7adMMZ7AojC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def0107aa4c96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40327,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07a06f1cd94af4b5cfb4ed6a2b9843d5","sha1":"a796421c6287cd1ef34a2d9f77026988869067ca","sha256":"880d32b9475ee937c93da3a43a6e5bebb30e5071120b073ade0beaf837e4f2b6","sha512":"b62f4e991c1ac9b0dde762909513042e4bd3862f6f9976f0d4a97ae8a604c99614d43800e4408e061d12da348c40842e2019998b24298022fff1f01be2bb9d60","ssdeep":"768:aWvE6lw7tp523cMRAMxhp14nIXAXvjC9IXYB5565H54rsBFKy4ROUfqDp0:vsEmMf36IwXvjC9uan615xBwv7fqD2","tlshash":"2903f1974a132c6ed6e0eae8769e50476f893addbd5e83b19651fcc30200e41e167b0a","first_seen":"2026-03-19T19:50:42.648111Z","last_seen":"2026-07-17T15:24:51.184269Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1912,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1727,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszw","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uszw HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukoil","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukoil HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/fonts/DINOT-Medium.otf","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexbit.eomjdvkaec.yoga/assets/index-4ee627d0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:28 GMT\r\netag: \"65447f98-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qb%2FkeFIXZL82LuuxNqiM8JqA1kxx72qQMOFeTSwvwFuJ3Wm8u0ktfhQAbWl5LWGkcupX2yvphLrWcmAIuNxo9n%2BRucwyIiHt6BMOWNne8ZHaMQTuuUE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f8095a96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-09T02:30:21.16959Z","times_seen":1744,"resource_available":false,"data":null}},"time_used":2038,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1562,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-9447ebb9.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-9447ebb9.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-3a23a\"\r\nexpires: Fri, 20 Mar 2026 03:38:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n7qKMpACDp6OPU10JUmuTU4WAuwyuTNNsJaOWA38x7h%2B47b4ROv6YLqlgxE4A2HvSTAR5DDofzE3E8W5XECRWaAPoGnGUVN5n5IzzJE9Ky%2FqxNqvvI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e68b0f96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b4693dbdbdabc829037bf3cc2206546a","sha1":"0bdd4b9f3cd55f993c46a703642a2c8201f05b04","sha256":"735b2b199e033837c3df751e7b35c70f5b73a182be948320987ec1cc934eb4ae","sha512":"1ed7921631a3274f9ff1a8d9bef6f4aec942391eb10221fd2ec25431211f71899769b0cc2ebc6b2b183f3af03d08b60258bcf0e4fcc08931fe806fa045960ae6","ssdeep":"6144:Y7KwccufKh+GkeUe25e22rbfdn7e5adR0mADU0h+ApwZ06E9kt3pHBAu4:dEufKh+GkeUe25T2rrte5adR0mADU0h1","tlshash":"393407957302b13683e256d2583a0506e2356a48354789acf2fc4ddf3d6a98a71fff38","first_seen":"2026-03-19T19:50:42.651312Z","last_seen":"2026-03-19T20:02:41.832377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":987,"receive":539,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=lhc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lhc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usct","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=usct HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usgc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=usgc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-9b63b805.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-9b63b805.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-633\"\r\nexpires: Thu, 19 Mar 2026 22:06:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6rvttzv%2BzV%2F3Mj%2FVo7saedhgoZGWMKTiEU1%2FnoMM6eRtenPofSAZkilDkMwRpwM0yfbT3f5p5jnpXyjjJuw2a3G541DCgOPm1I%2BAgDANbYvPn5mf8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e68b0d96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1587,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1586)","md5":"4bc5777c04875c84c1e31fc89065d4fe","sha1":"0303ac9cdec1d72a1dac191b7c56f1afde2d6ed9","sha256":"9b63b805907cf76717a81e19b4316475a7296d566b7a315321fee3b1aa17861b","sha512":"a24a539e7428c174fe9398dedfaf0e376a7eddd7d0705404d24a909be6e361d53bbceabf798a027751266ee960af93c40cfd7cb042b0de7cae913cf0f92b31d9","ssdeep":"","tlshash":"78310735ec905877dd227124b6e165c8a03cf1717ea1899a712d7918cbaf6f4071b20b","first_seen":"2025-04-17T21:25:00.101735Z","last_seen":"2026-08-09T06:30:16.445559Z","times_seen":181,"resource_available":false,"data":null}},"time_used":977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":977,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usyo","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=usyo HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/type/defi_activity_type","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getCoinList","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:07.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:07 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getCoinList","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:07.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 20\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"_t\":1773949807150}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:07 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47437,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (47421), with no line terminators","md5":"e188c1c1a31f477681c45971d39d355f","sha1":"b6e2f07616c6f6f3b0354aab8498b06f5d588ec4","sha256":"bee02ea5abdc33fc52565377e8f1cd0eb0d4119581c8842720eeca22783a7e64","sha512":"6403136d798ddac3e1f16cde9e307c297e7ec987204e6a7a961c7328783d7f451ffab9a30b1bfd17ad97801ac85ff65feaa4ea98c5324a7a48cac557e23b3268","ssdeep":"384:xg2XGRnLOI5ryjR3SL7V2CP3rhEUN51uuM3Xd:xtGBL7gR36793rhRO3Xd","tlshash":"3b230f55612c55bdc4aac0e12eaf7e63608d353fecc98e1e93cd49998ed8ab0550bf03","first_seen":"2026-03-19T19:50:42.652988Z","last_seen":"2026-03-19T19:50:42.652988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/ja-8b4a106a.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:00.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/ja-8b4a106a.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-aab5\"\r\nexpires: Fri, 20 Mar 2026 03:38:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEFvPVZYM31dDRg8YGTpGWS3iFc1fsDpbn7rNfK4dnmEw%2F5TV7EKruCHOD8xy6u2sC2dWviJxnrvsYjkMDgv%2FYnuQ%2FUWaMFFKbt9VfZkv1RRd0WM%2FOI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00eeeea896b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43701,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (31011)","md5":"0dc7cb9248ebe65898d0b7e097d48803","sha1":"3f30e3986388adf7fb419d5bb43d0aac855c4b6c","sha256":"7fac48666f840061d83ceb6773b5c397f8083c256995950715c96b40241d54b5","sha512":"e9c892df4acf63c5afb0c129e0101ebefc5d501a5c3f5efa48d9004d604f40cd31ae5dd5c4da34bc886fe1ed69e9fdd870acdb6af74490341d2441ac1deece1b","ssdeep":"768:MFuzzADVbvCywp8Hueq6C3x2U3mL8wgGPvbaEIumJu:MFuzzADdzYS37C3ZmYwaEIum4","tlshash":"9713e9ec9fde692944fb9233614e698050b24c8dc9a196a64ffcc9b4276071fe343e74","first_seen":"2026-03-19T19:50:42.654602Z","last_seen":"2026-03-19T20:02:41.830967Z","times_seen":2,"resource_available":true,"data":null}},"time_used":990,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":990,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukoil","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukoil HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ushg","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ushg HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=lhc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lhc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/charting_library/charting_library.min.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:55.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65447f98-2a6b\"\r\nexpires: Fri, 20 Mar 2026 02:53:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNKXTm4aqFe9TP%2BtCLT8V4XB7JoqfDnBGA5unOAd0Pf0aIHirXzoRJUOuONfpnN73UcotrnMgSm9B5QSjkRCBjkH0a7uQXlW%2B0FQ14JGgS%2BaGHrx97w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00cb4fdf96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-09T02:30:21.1711Z","times_seen":1300,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":979,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukah","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukah HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ussi","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ussi HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/etc.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/etc.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-5ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Men3aDZiKe2Se5GyZnuUou2U1VTZ9YO8KVvlkz4Xk%2BUwSMklQK%2B34vbVC0prnrcAbhpU%2F4NAnuAlg2%2BWLNc6m%2BU1mBzU43FGJ%2BMjrK8PWycp0SLrPs0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7d8d396b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7301dd26e0f07070eda6a809851cae46","sha1":"c704f258a9d934cfc16f07768fb728306df3daee","sha256":"3b51b65fd3104f3302227f61d97b9f715bc28f0b09c455e5eb39b935d60a6db0","sha512":"65e827bee302f525d2f920e85f9fcf7fe224022d50f500cdf751cd619757c2d291521f2d4ac5de827bccea65e8904f3fb58513524976e44d85b33cfa51d4ee1b","ssdeep":"","tlshash":"8931118c5f1283239200abfcef7c9026b50251de609267cddad62569bc195f40e4d9eb","first_seen":"2026-03-19T19:50:42.656264Z","last_seen":"2026-07-17T15:27:27.711694Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/texchange/getCurrencyPrice?currency=USDT,CNY","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/texchange/getCurrencyPrice?currency=USDT,CNY HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9e20f3078f03e117278234766ce7efb","sha1":"fff432a277ed3b57962fc292ca3c8213748d430c","sha256":"6643f014d962f9e589f16437f47e4bef2d4bf4de62fc1fdcf313a2272e61fcc8","sha512":"f89748bf24be2e1fbde1d663261de9255437324fccc5f815e38dfae1e2581a314f24d1e06ac9f0a345091363840657c45b26af0998126183cea500a36a6d354a","ssdeep":"","tlshash":"48a002951d988242aac390a7d556a209823435607b79a3884d5b512d90cd1662141958","first_seen":"2026-03-19T19:50:42.657435Z","last_seen":"2026-03-19T20:02:41.811694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uspa","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uspa HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uspa","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uspa HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszl","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uszl HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/trx.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:04.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/trx.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65447f9a-70e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgGzpHmACGUsRRigHhbPBi7BnHi99sPq2yvn86TCJPplXMo9pMA1q9XxgINUmiGSBoknKnXqPsY%2ByaVk0ffWfFiKXOpA9iZ12uMsmRd5ku%2B3%2FpkLw84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def010338f196b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1806,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72495c21d68b98c6affd835cbf2089b8","sha1":"965f1ebcdfa4ff9c339a9010516e1f6af9e0bc41","sha256":"81de4f5cc5e2d4e0dcda314e1b646f18f52198e4c996943f4f69455645d4101e","sha512":"5949b86e29f45fd1996bc6b053f5a675f65c5ce042df261d6312a20fc414ea2487926977c2ff357a60392ce7a24b395f51de76479748a05c6d9bd4eba6fd3925","ssdeep":"","tlshash":"be31209077692274a54b83c4d6a46191720b90dcb2a29b7ce365b670f092ee99d04abc","first_seen":"2026-03-19T19:50:42.658443Z","last_seen":"2026-03-19T20:02:41.839898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/platform/dev_dark/favicon.ico?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:05.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /platform/dev_dark/favicon.ico?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:08 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Mar 2026 12:48:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGW8tmYOHB0LbhrhSYb32YKQAaiVIQ4ObTaYOgRNu0Kux%2FqTNMNwgkYihxbnylfvLcdX9t7d%2BXyXHIPkM9x1Rfa1tP16Nfnbp%2BJfdsAE2zzABVX02oo%3D\"}]}\r\netag: W/\"69b55926-7a2e\"\r\ncontent-encoding: br\r\ncf-ray: 9def010f3c7696b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31278,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced, 32 bits/pixel","md5":"d6dcfd4fdccaf48e779782fd836685b0","sha1":"4c2371b8cde971059912cee96ba8b2cb3ed2fe7a","sha256":"20568b8ae3c2ae7b1d9df47f0b248b5510ebf141582244f058d3c73137bb5dff","sha512":"e4430dafd1fcc4e6bb7325346471847b712cdca31f26433af361d4d84c2a24b673cad081f9f33e65641548236e469419db3b11f57d5a6fc1efa9a6e11142ddb7","ssdeep":"768:SA0WfZlJPZmqZUHmPbHDiQXHz7CZoH2eOL:L0aZ5mq6gbHDx7Caq","tlshash":"46e2e1dfc82252807a3cf2759891c34ae5ce35c2fdc6a789126a1c5a8d67480f54dffa","first_seen":"2026-03-19T19:50:42.659556Z","last_seen":"2026-03-19T20:02:41.810169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2122,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukpb","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukpb HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukni","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukni HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukpb","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukpb HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uscc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uscc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/8a3e12379356460ab7f1ae654db50297.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/8a3e12379356460ab7f1ae654db50297.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 02:40:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b22783-fce\"\r\nexpires: Mon, 13 Apr 2026 12:05:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQTn%2FyDjRTaJoxojlWO2Ikmc6Wi852NUOcm2HnNZzGiQcP5d1nwPiUBkbQb1aBZWl%2Bzcr7p02NjWtJTPJCbd27FM3BXlNGy1ngyy5R%2B6Xz5b4Qq1iJQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7a88796b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"34e2e7df9f76d3c8ceb2afc6061a2584","sha1":"ab615d119ff6d6c3126d6be94af7cd796c3b7647","sha256":"c29d1cae419f28b1d97947571208df15ae6ffaa30edbda41eb373749deee3a62","sha512":"859edadacbc4adcadfbb20a2131efa33aa0aa2572d7b875bdd507735aa24b4cdb2a6fae486d23881047c08f8a474aede8dd05e93c06146258100e6b883fb9082","ssdeep":"","tlshash":"5b818f75040d1d1f1dccb08ce67a1e00675a873219a82b8286af2f9960ffd59028ec8e","first_seen":"2025-10-15T08:30:07.676215Z","last_seen":"2026-05-10T04:05:26.833766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/notice/list?key=INFORMATION_NOTICE\u0026modelKey=TEXT_INFORMATION","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:03.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/notice/list?key=INFORMATION_NOTICE\u0026modelKey=TEXT_INFORMATION HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4376,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1245176a5e46b023a7a0bf411b3796a7","sha1":"8fe4407852de6d87c141ee8315f66ca3922f42de","sha256":"31fa20de8149f7f92e26657519cac69d70a92a3a7035b5dcfcec3d0648eccf05","sha512":"66699fda840996de2bc8220f0c575b02aada997c5466e6f7313ac1d3171c785e5c4f5286e18429ea7cf3153577db001163a101b99a808f534a84c843d26ffe19","ssdeep":"96:dOlmPfZrtEi/6Pf1sCZwe/p1VhsXbWZ+TXwbo8xvkCRvjq:6yrWi/6uiwe/bViA+zcvjq","tlshash":"3e9121add3c1796684a112ee297e34c4711c9ccbc7a27d36403ecc18e69476ce22b57e","first_seen":"2026-03-19T19:50:42.661788Z","last_seen":"2026-03-19T20:02:41.812211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-fe73ef38.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-fe73ef38.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-5493\"\r\nexpires: Fri, 20 Mar 2026 03:38:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7SMhh2VXNXZeu6gG2m9rWcCU44xcW4%2BRmb8oahyJVAwyDlATa%2BxbUc%2FnuJSa4sSmEr9G3O5F%2F1RIYOuWr2vd2l%2B2ZBOoK9lsCi499%2Fz9osdrzzPEU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e69b1396b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21651,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (21646)","md5":"dc15135aeb93d7b836127f35f0d862cd","sha1":"7bb8528fda3b8e57fde2800588af34bb51536ea4","sha256":"60164857636603433949c942d52e1bb1a467b97e1e75ddd6e4940a9d958c6e85","sha512":"92fecf2c7c6e5a7f9ce783e8288e1eaed697a3f235749b835877af15b18e0b6113bb1ab79ea7fa0c53806afe49ef518cd15910516d52f7d64e1b77da121ac8bb","ssdeep":"384:5n9lMums6BheNe0zAgk0IAWTsQGU5aXj6T8QYGzAzT:5nfMumFh+zDIAN4aXjYq3zT","tlshash":"4ea25619bf156a3de437a09c820d7164212e3bf5b20d8054f7be0438db29aace977797","first_seen":"2026-03-19T19:50:42.662795Z","last_seen":"2026-03-19T20:02:41.807463Z","times_seen":2,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukzs","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukzs HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszs","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uszs HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/type/defi_activity_type","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-08-08T09:33:39.911261Z","times_seen":801,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/ethereum.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/ethereum.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ovgnrn5nK%2BzNSUjlasK3BtrE7k4mqex10aQ7B%2Bp0Is7DPVz91w4s8LtPmSDmwQ71VI3Rb0%2Fbk8Mq5kz%2BV8Jm3ELBRqENxajK9vZlRlCHRCXZGSEv0cI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9def00f7985f96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T20:45:55.392299Z","times_seen":547770,"resource_available":true,"data":null}},"time_used":1342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/qtum.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/qtum.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-2430\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNCGkiaKvvx7BsATmKVcKVnWOc4QRafhYa8mwe8rQL1CPML7LAtQ6f9%2BMwmNNujMQu6qWwgCS%2B9l7opi7pguRVnDLQbV9bbumdjV%2FMXD%2BYeIq%2F1QTUY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7e8f796b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"501e62fd25ca77c4466d09104e7b65ea","sha1":"d92c2e5ba1319415f65faf126366729a93fb82a5","sha256":"8f4baf5d755562ec5fc1b4212c17a912f1e69a182fae668dc42f7e8196713b25","sha512":"e020ab3e5d1b79eea111ed991e19a0cdfb4ef9593afcb935e0e6ac6983177d92d5fb4347b1123ae0e25803a7b92b73026ed74d906f4c9442af577abdbca85537","ssdeep":"192:cnxt06AfRw8owkc6f1BpeXYq+QXtcVXMJU827QuPwA:cburojqdc5v827QuPwA","tlshash":"b512518d9f928b6662c0f3bd8b399461f40502ec3459d2d8fadd50b1b81cbd91c899e7","first_seen":"2026-03-19T19:50:42.665223Z","last_seen":"2026-03-19T20:02:41.825107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1885,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/vet.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/vet.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-4c1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6aJssZlwBJRLF5o%2BIh2NRWZNUu2H4EL2BMt3j03q0VH0q0sFYQUw%2BsNlcXEe3NpU53hKFBytdFXTCCidbKqWd9tIC7Wt5mbhRuaxJZM6Li44FoQvg8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7f91096b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e4cf5f18227e642d12abf39893d432c","sha1":"a820c80374e5946c7a9d1b47290076133755ea59","sha256":"cede20344dee83ef96784196986110283905fd446dd21780b144b05731d66565","sha512":"937c004ca84f9d8a8e810aad185d2ae88da33a34d293bd168a53c01a0691b55c62cfce9f8eca07d14d180fd06abe9a55bc505a1791889d0782b5f28704085dfa","ssdeep":"","tlshash":"a22154ac4765cf91e198d398f7f448174467109b109683d8dbe05b6ff821af50a04fda","first_seen":"2026-03-19T19:50:42.666431Z","last_seen":"2026-03-19T20:02:41.813355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-0711ee28.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-0711ee28.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-9e7c\"\r\nexpires: Thu, 19 Mar 2026 22:06:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4qUYqPQlEsCPe2NLCETjSAsaHdir42xZ1VGpYrQpLSmepMxqCwn3tYX75NReFyXpPlQdOtmL1N6Eg6aWv8uiqGgWtKT3apHm2b9gxdRw4ps9xNvbKE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e68b0a96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40572,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40571)","md5":"9f4e43e2b834b171b52f2c28873623c7","sha1":"19385cc5368f078a3b44750848f979595647c6ad","sha256":"0711ee284320f9dabe61cd25df856e6a195aaeb48cfd2f29854c628d1d31409b","sha512":"7ea78acf34f72a08d0c6b9389611f14243decbf9d226cdc1986b0c6c26dfb42b51281e0d3c352b6f5d9ac752ece6ea8d0a183f77a0e0f1818061b6bfe7a72b1c","ssdeep":"768:9Mh/1QriZqkB2SVVcZNMBwHi0OTEV7qTd6w676L4CVDWM2Lu:9MJ1QrrG2SVVcZGBwCzTEVuTd6w676Ln","tlshash":"cd03a865b6922029a533c3857dd45d8cc518bf32e2039dd8f3a7640a2dcb7eb26215bf","first_seen":"2026-03-19T19:50:42.668191Z","last_seen":"2026-03-19T20:02:41.831629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukni","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukni HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/notice/list?key=INFORMATION_NOTICE\u0026modelKey=TEXT_INFORMATION","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/notice/list?key=INFORMATION_NOTICE\u0026modelKey=TEXT_INFORMATION HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/coinInfo.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/coinInfo.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=um9X3FDnsuSgA3Oia3pg8YXrhtv%2FgwgbepPwW%2B2R0Smf%2FMJjRdAq7KZgOaWJ%2FXkjC1T%2FHzqujmqOgZmcVSUyILpqTOaEZ%2Fdrr5mOsRKM07DnrbY7ysU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9def00f7b89c96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T20:45:55.392299Z","times_seen":547770,"resource_available":true,"data":null}},"time_used":2534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/usdc.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/usdc.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-14e71\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duRMNl9zyl19%2BuUXTsonrRQkvsY9u49QaBfPLoNBrGDR6N3wAzlzLD9jYkxS0GSLOOxMGkxWwPpGs2B%2B%2Bc70rj2hs5WylL06Q4%2FcrfDRhgE7nBMWcsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7f90d96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c856035086f5eab0dd5bf880c2634609","sha1":"9a46e12b25c7efd788f5377eb56f17343df0b757","sha256":"f61505175490862e7d07fe2ef978419293f2308dc58c82853f82abc0aafb3f6e","sha512":"7e82917e852f32743d6428a24551f21dfb15ae7e2bf1289f4c0124544b2ccac12c8404202efbff130c5f6fdb39af7edcba4ce9983fd0d1cd95899b26f694ecb0","ssdeep":"1536:3tDbWHfkjPZAr6EUZq4bcEboNuY7PQtSOgmqwNw+q7A:77","tlshash":"0a8353ce9f058fa65ac097acab2140503ecb60ae257dd2f0d6b5d2f7b809575488cde2","first_seen":"2026-03-19T19:50:42.669214Z","last_seen":"2026-07-17T15:27:27.708423Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1476,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/btc.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:03.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/btc.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65447f98-6d3f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5EGHP0EayC0Sc9GYvavMzjmJtHEwJpZtBMzy%2BBucJmHxncXl9FVbes5GgklTQ9LcQFszGEKQhmFYAtp%2FhxjpeEFFT9OT7GhwuyxryqcJ49vMEkrc2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def01023ed996b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27967,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b8adbde53c35fdb6ab724cd892be7d4","sha1":"e8f45f3ee95421d7223ea5b8e8013ac7658e3740","sha256":"509b9873c4c668ce8c12c00d0a1a6559e06f8591a3a9d7a70b31c00509fa9f1b","sha512":"85ba7d604fcdb1dd09c7fe557a5ddf9e5d63dea844fd0ecfbdbc0bfcfcc5409e6b3eccb0804387d249b88df36484e8551658d69785c95dce5b1810776359398d","ssdeep":"768:H70cG7YWF3Oocr7KVIMiYE/MZHWtNl/fZ4/fvBXXLeU:H70H73F3Oocr703iVMZw3HZGBnLeU","tlshash":"3fc2f1fdbf33c64a8748c9192a664b2e5f7c8c5a1481a7f2b5324337085b792a29d078","first_seen":"2026-03-19T19:50:42.670452Z","last_seen":"2026-07-17T15:24:51.187689Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1856,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1816,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.nexhubitgyg.cyou/ws/9abda061-9f49-4a56-b06e-f216f4ff6013","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"GET /ws/9abda061-9f49-4a56-b06e-f216f4ff6013 HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hzM6jBI93yXGkSPcx2bE4Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Thu, 19 Mar 2026 19:50:00 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://nexbit.eomjdvkaec.yoga\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 8MM3om3+3j7f16bQUvc1mC+L4Is=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":2071,"timings":{"blocked":0,"dns":676,"connect":913,"send":0,"wait":239,"receive":0,"ssl":935},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/eth.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:03.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/eth.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65447f9a-1a3b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wJtO5JnY6ofE%2BfESY04%2BgyaMDXSgBkRkoNUsSQ6vIAELVY43aAL4ke0zFgTQ4aRJ7iXm8nXZarzhSViTjaIdSrotKD1l8hJBLm3tSieL%2BBiLZ50XqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def01001a4696b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6715,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f9e9a3d5f1c0a9903dcef7870f691bd","sha1":"e45ee8dcc12799a3c144432cc29c7918d2ed66fb","sha256":"757855561ad0eead22197104d8f1c86ed0919de3c26a2b1716c46343e7cf8908","sha512":"bbc88c9cbed2b25e6e0a59b0fb7d8f32e5f6492399078f1d535c3f7730719c275e8d6187eeaa0e2c21d328804e069a045b101a10b5efe285dee8a9d149016ca0","ssdeep":"96:+joex8iBxlMo0qxoMjJLSXfRb576qUgtPUl9qVTskUbpJkcp/4nlpG3rZS5f:moykBF0Sp5WqtzVTNU35/XS5f","tlshash":"e2d15bd7df8607ebea19061cb8b085755c9c0dce04a01ac62a0f54e7f653e22b5962ee","first_seen":"2026-03-19T19:50:42.67193Z","last_seen":"2026-07-17T15:24:51.189304Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1316,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/vendor-f43db9df.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:56.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/vendor-f43db9df.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-e745c\"\r\nexpires: Fri, 20 Mar 2026 03:54:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5ffsV1KsOr7ytxZJEV%2B0EOkM3d9x7aqlh5N4qtqx7RhW%2FIuLfGRI2XM2m2nO5Jx0F5BaQjAbFqH612BEJzR1ByDvdWQWI6iWoucA%2F2Fqw3xmbJ2Yh4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00d368fa96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":947292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9464f5d0ee35f88d7f8b0e60ecc94a8f","sha1":"16ac4f9f73e0e2548870d4b215d0e16110997410","sha256":"b14a577fa98a858ede8fba2d239765ed68e496699e22d22b56d946a04b487299","sha512":"c274e0bb1928371696c8552f294efbc93a1b458d42965dc453e138b09add4be4adaf33d1700c76a39878e9b2c8725218e619eafd89045897bbadc1149ed5e0c8","ssdeep":"12288:NAb1K+srMgFxlaWDUl0wde6xvNYQnwjoTlvuXVYWlGszn4YCtT:NAhIlvlOl0wdwQnCgWVYWlGszk","tlshash":"ed1529c97692f06147ab24e240bb0102f3396e59740e84a4f1ad98db7d7ad89d277f3c","first_seen":"2026-03-19T19:50:42.673283Z","last_seen":"2026-03-19T20:02:41.828752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1274,"receive":1585,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/currencyItem-77af3258.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/currencyItem-77af3258.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-17d6\"\r\nexpires: Fri, 20 Mar 2026 03:38:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyAv%2BzgF9ZEo9QpmJnwktdfe1vPt3THtoIZshpm1e4ohvxfANMHylCfdZ8PtxkhIOZvSKDNUX6nzlICzUjROsJVQUhl1DRN9auaWgCkJQnhXQX4FMX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e69b1a96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6101)","md5":"47de42e397643730b65a89d2bf413987","sha1":"d6e64ee8926e044d7504fbb1f65e18cdd4233b0b","sha256":"4b6fac598414c241e9aecd9347449adbc1231262a8beb2259fb130aac05cfe81","sha512":"6304e828a284bff72ce57d9a8df3e76963eb780b44e24d4cb3ef3235e0780b2e7d302efc645fa03140346cdb98e6c21bff7043e790e974cad40ad192755ff69f","ssdeep":"96:S/LwTMZ81StulBdyRNuUl2D4PDTPvUSWNPQVIwk75sR5c4qkq0pJOGROB6+hqpnB:S/LwTMy1StulBcmGPP8SqIVIFlC5clBQ","tlshash":"65c1c672bc207578d7b4488088640122127ffbc5f062ced2baae58593f23f49957edd2","first_seen":"2026-03-19T19:50:42.674712Z","last_seen":"2026-03-19T20:02:41.820208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getCoinList","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:00.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uscl","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uscl HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ussi","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ussi HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ushg","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ushg HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/8967f6c5cd46415e8123507035453158.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/8967f6c5cd46415e8123507035453158.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 01:29:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ba000d-23d1\"\r\nexpires: Fri, 17 Apr 2026 01:29:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lgi%2BFLLgmUOCWEjn1MSxhCC3TG4CbQwFI97gFLxN1FQfVytONz30D1mvkzenEQUz0o%2BLb8yy2xtEGfE7pDxOkuW5G3kL%2FF5Agg1AglqmJH8gJaF3oe8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7e90796b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6578b2564e50187202fc68c37e540061","sha1":"475ccb54e0eb7f3a8b9eb55dfa27de9c0eb9a25b","sha256":"21f4b9db882de5f91403c4352e6c0cd0ed799a0a0d2eea957eace1a0a17b0e4c","sha512":"6fc93625853915eebd1db96a2ec3826864480c935892f54546ee257438c2da457bf9d80b35a4186800258e49889b8eba94e585779ea318dbe1bc81a8c92a1ae5","ssdeep":"96:g/XOWMtgQN7zZQKpC24pZNnQLWuE/loxhdsdsdVdsdsdsdsx:4+WMqAHZDpV41QWuE/6huuPuuuux","tlshash":"581258d447c9ea26add1bc8e6e921bb2d188153116e4e3300cc9a46e55c4fafed34a71","first_seen":"2026-03-19T19:50:42.675767Z","last_seen":"2026-03-19T20:02:41.822962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/vendor-f43db9df.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/vendor-f43db9df.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-e745c\"\r\nexpires: Fri, 20 Mar 2026 03:54:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZND%2BMmxLzE6KDI4BwwJ4lRgXEC5Somgw2sgrNYdlnSGHOx43pYJXzuJ7Y0qmbT84bMrxOUq4tkyO5M9Y6A8tYoaCCHIuSn4CNgFWBRFI0HMmWUPR8CU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e62a3b96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":947292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9464f5d0ee35f88d7f8b0e60ecc94a8f","sha1":"16ac4f9f73e0e2548870d4b215d0e16110997410","sha256":"b14a577fa98a858ede8fba2d239765ed68e496699e22d22b56d946a04b487299","sha512":"c274e0bb1928371696c8552f294efbc93a1b458d42965dc453e138b09add4be4adaf33d1700c76a39878e9b2c8725218e619eafd89045897bbadc1149ed5e0c8","ssdeep":"12288:NAb1K+srMgFxlaWDUl0wde6xvNYQnwjoTlvuXVYWlGszn4YCtT:NAhIlvlOl0wdwQnCgWVYWlGszk","tlshash":"ed1529c97692f06147ab24e240bb0102f3396e59740e84a4f1ad98db7d7ad89d277f3c","first_seen":"2026-03-19T19:50:42.673283Z","last_seen":"2026-03-19T20:02:41.828752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=xagusd","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukzs","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukzs HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukah","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukah HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uszc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T19:49:53.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vv7grN9fsixjxJATEFd9nOUVBKZ2J1lcl4UWhPTSTmz4LDrkhLt5X318rqF%2FovRL2NS%2FLUyrvTBS7jx1UelZp3Se6%2FFPNO4JyKRqRZfK2sSJL0muHOg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9def00bf28284651-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5627,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1260), with CRLF, LF line terminators","md5":"56e567a43ebb81d98f98cb86d5332f76","sha1":"87964d72ca442be6fe35564ff8ea506451c1e8f7","sha256":"e9eb868e047173f92c600bafcfdd6e6154d5ab2526e0d48d4b6e300f229d4f14","sha512":"b808fce1d1c44b690e8ab1a496f093d4fc4ffdb510458486ea8e3478d017ff21cfcb54611fef4ebe01ad2cd143862b235fa4541315df6ff827864deff814d62c","ssdeep":"96:+r82XbEf53uEPYVX0aSNtasl/7Xfr6TCZydHRH/gp2mUsGKAiowGwuB1niHEiHuO:+FXQbPYVkaeMs1hZCxfQ2nfD3bwuB1nK","tlshash":"29c162f75da4881a23b1066befd7b008db62218386695914b1cd40ee8fe1fd2c8c7776","first_seen":"2026-03-19T19:50:42.676761Z","last_seen":"2026-03-19T20:02:41.813926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1908,"timings":{"blocked":59,"dns":28,"connect":8,"send":0,"wait":1790,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uksn","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uksn HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszs","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uszs HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/currencyItem-77af3258.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/currencyItem-77af3258.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-17d6\"\r\nexpires: Fri, 20 Mar 2026 03:38:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIKCi65rGx%2FyIsVBsJ2BxLvPWJDXcv5xcibocyDnKfcrTX1SQHNIwtkZYOBMI2OXPZ4DCyrmD9m3KHgMxklJUrFzGyWwUD%2FisTb40VkLPBd1EXlWjmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f69e4a96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6101)","md5":"47de42e397643730b65a89d2bf413987","sha1":"d6e64ee8926e044d7504fbb1f65e18cdd4233b0b","sha256":"4b6fac598414c241e9aecd9347449adbc1231262a8beb2259fb130aac05cfe81","sha512":"6304e828a284bff72ce57d9a8df3e76963eb780b44e24d4cb3ef3235e0780b2e7d302efc645fa03140346cdb98e6c21bff7043e790e974cad40ad192755ff69f","ssdeep":"96:S/LwTMZ81StulBdyRNuUl2D4PDTPvUSWNPQVIwk75sR5c4qkq0pJOGROB6+hqpnB:S/LwTMy1StulBcmGPP8SqIVIFlC5clBQ","tlshash":"65c1c672bc207578d7b4488088640122127ffbc5f062ced2baae58593f23f49957edd2","first_seen":"2026-03-19T19:50:42.674712Z","last_seen":"2026-03-19T20:02:41.820208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/bitcoin.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/bitcoin.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ao5%2F0m3fL%2Fb3wQAtxzCeUp00k1Ts92kP8%2BEtnjAaksCs7KPgDpIGS1C6KHMys4Hr%2BD8fb3jy1qwicWHRi0jeBI9MT%2BRHM%2FuwHcAy5gqqMtGXh9iOg6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9def00f7984796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T20:45:55.392299Z","times_seen":547770,"resource_available":true,"data":null}},"time_used":1697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/ripple.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/ripple.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJVXIAwKoEIT8mY7gT75N0LIL2ir%2F8GzLYc78aZyvAF%2BN4v3tKmEylF0H9B%2F%2Fmfl3Ib7LKAOCUfPeVDDo3haaxRyVKTaqabSxiToY0X6FYbjzCE0Jl8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9def00f7a86e96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T20:45:55.392299Z","times_seen":547770,"resource_available":true,"data":null}},"time_used":1323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/mln.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/mln.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-1230\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhqF8RIXm%2BerI82UkjH2IT6zRMMKci5VOYOA1Vx%2Bu3%2Fz2EYam9TAAAiUCm9dWvSUUxtyV3foInyoVf69N60k6DGwtvooghHtmfaysLRlwnoXL5Hi3T8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7e8ee96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4656,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"496660574e17d5da018876ca60ae8f96","sha1":"4a01dcf4b48b1854937d2a30e2440a346377e1ee","sha256":"4af6d386d2fa513a0ba561d0dc987f4dc2cd37b90475f27dc7922e78b23284f9","sha512":"d32c46a35b323b991da41509787b2b2ed267db22f08980f4a08d5551391183f0b3a257b25839d795bbc1134c17a96ff63793bce2904b73c3d1802b0911aa5738","ssdeep":"96:cPrWMOl1xrgxlMujy+Ea7kAZMMR5J9Z12Ihwo36Pu5bJ:cDml1x0w+vfoAiy32IhN6sbJ","tlshash":"84a1e3ddef460f679281f3bdebe41058648a50dc287493e4e7f4022bf8086a95c85de3","first_seen":"2026-03-19T19:50:42.67772Z","last_seen":"2026-03-19T20:02:41.812781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2055,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.vip/","fqdn":"nexbit.vip","domain":"nexbit.vip","tld":"vip"},"ip":{"addr":"172.67.210.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T19:49:52.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexbit.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 10:57:35 GMT","end":"Fri, 12 Jun 2026 10:57:34 GMT"},"fingerprint":{"sha1":"BF:C7:D1:75:29:A8:D4:C9:18:48:06:9E:5B:81:63:64:81:0B:24:B1","sha256":"B5:D6:1A:9B:DD:B8:67:D7:1A:FC:12:E7:29:2D:3A:B1:C2:18:CF:B6:9D:0C:5F:2A:4E:4C:E0:08:D9:26:4A:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexbit.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 19 Mar 2026 19:49:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://nexbit.eomjdvkaec.yoga/\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=6em8ne1kio6gvlnph4vvuv4qs0; path=/\r\nexpires: Fri, 10 Mar 1920 03:09:00 GMT\r\nlast-modified: Thu, 19 Mar 2026 19:49:52 GMT\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWFGZN%2BaZEq%2Bg%2BYKYdg9St%2F%2FFFo6NzrdABx2U51nQ8De%2BHXVXZBFT%2BO9UKid2sTR%2Fa%2FWzkJL5AUEuYQhD0wp0HhTHQK3JZgxRSs%3D\"}]}\r\ncf-ray: 9def00b898b4f351-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5627,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":59,"dns":30,"connect":8,"send":0,"wait":982,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-1f3ac168.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:55.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-1f3ac168.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-29c97\"\r\nexpires: Fri, 20 Mar 2026 03:54:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAqnJzKBfiKntktxjYqyQerSU5JtC%2FlFWeVCCD5SljsEDhyO%2BKTR%2FQ7gtzJygz6rNYytDmVoxa6P2v1nF%2BH9zeP7LncGwks1qNZFt%2F43ISUZ%2FW%2BwpaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00cb4fe196b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171159,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65510), with no line terminators","md5":"7c3b39853cdb2c41c38ea196e3fa4adf","sha1":"a24ce0a6ed79b2d94cc0c569bc1f3279b2d0324a","sha256":"1b8e04ee85b45c1b37da713f84a353bfceae4285b0ab77592064101c85c78d21","sha512":"e2fe84c7a80cf8bf7f9ba49c68a54b626e79154f96e35242843d3be81820214d2dc5e2cc1d8235aa5701c27d82faca5a61824d04b4580296df0f0f489a47a476","ssdeep":"3072:3Yw0mtP+AIpuIZcq6FFXKwgUmuO4BWQ4BW/eAYx2zIS9BwHsA:ITmt1I80cq6FFXKwgUg4BWQ4BW/BYx2q","tlshash":"0af36c5dab011ebf597e0448a95e2010206c2f9ae98cc8d3b2be4c5a27f6ddc7327774","first_seen":"2026-03-19T19:50:42.678684Z","last_seen":"2026-03-19T20:02:41.815035Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":976,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-d7c550d7.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-d7c550d7.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-3242\"\r\nexpires: Fri, 20 Mar 2026 03:38:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvJ1pzqpt9HHu006H2GXYhB%2Bhi4YlUjU6DD3bIoRNIL%2BGwrDns0sdncZX7DQKNHRPDw97aS1AstsQDCGgUSo4VRRQIRZ%2FnysxaDWJq5bVtJ1zHtUR48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e69b1496b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12866,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12597)","md5":"7be74ddd93f7ce181f152da6355c5bc8","sha1":"7310e6fa4a14a264faf4f95dbfa5407c6a731172","sha256":"ecfe5eab80306e8212574fde11894ed82d9dea95c619149c4e5157d611a3071d","sha512":"422671c4f2f4049d5ea7b88fd5d8468674bd8590abbaf7f9d3a77f4f535e7fd89d9710984d5caf8e7d397434c63d806646df57e6844e479625e24c525dab3683","ssdeep":"384:Dx0TP2284tjpoxcmGBGMlbFjK7NvE/Z6rt:DxIPN84tjpMggMJENvE/gt","tlshash":"8242c982922a92e553b54b4845123371d114763cb5888cf117dc4a037af6f87bb9bbe6","first_seen":"2026-03-19T19:50:42.679704Z","last_seen":"2026-03-19T20:02:41.829904Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2072,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukca","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ukca HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usyo","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=usyo HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/platform/dev_dark/logo_144.png?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:05.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /platform/dev_dark/logo_144.png?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Mar 2026 12:43:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b557f4-560a6\"\r\nexpires: Sat, 18 Apr 2026 03:27:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peTtfcHNVElznBdTWSf1AF22Vx9YusJs33NWfaWPPlfht%2B1PUlQzGMh%2BO%2FFSjHkiwVNQi%2F%2Fp%2BeMcL8U%2BQLynvBLvTHZ3AlPzhw4Ex2s8B5RVb4fqPc0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def010f3c6e96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"1e17369fe224f2faafcdf765b535fb54","sha1":"8040d3c2c1c1b5e812a33aee8ac1cc18c1d20485","sha256":"b42fd53adf6b97a8985ab03c107dcfd20836cdc7bb4ff60e463479fd0c23917a","sha512":"50b9c25b2bcec0742e2d7f3e20aa39ae7af2f557e90ef0c4f3eb8e66e9f617ab65de3f3889db577010c4cf6562f2c994c75b38f840512157c7f56f5bf2226321","ssdeep":"6144:RoaSsnzBvy98S13hJvq1rUZhsY9woOrMsA8ZgyHGpsFcqCg/uJDohjnpY9PmtC:RG01vyN3hE1IZB9fOtA8WympsOqgEhjU","tlshash":"f27423669cff83c7104ae13d39ce467097b484e8b777c7c640a96938a16f9e1397432a","first_seen":"2026-03-19T19:50:42.680667Z","last_seen":"2026-03-19T20:02:41.82244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1523,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":333,"receive":1190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uszc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=xagusd","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xagusd HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/ada.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/ada.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-1da6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHqUTLJCmUxSfslPFYEeblsCtLgp22FL%2B0UFAYHTCrCH5IP6uc0Cqg3Xqgj63CYv4tZLZTF4hdT3%2BYixR63wgoY6QqNM8V2pLXBZuH7vSSsdgGjrsfA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7c8bf96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf8c9b93d6d20fecf776933ac6aa4aa0","sha1":"330026770c2a2cb4fa0b23aa16a4ca21146cd3eb","sha256":"69c202be4e8f4dd960fb718ee77f663a4db9742730c24c8439035cce31aba4df","sha512":"2c530f25e33ecba2f7b098203d3b68ea019718cf99a094d2f00ca729109a3ff6c46cb33137a9e535b21d4d268333dd92adb9342a3a8eee08c3bc8030cfd950ad","ssdeep":"96:cPSMJfr6HBmUoX6YKVH1HXtWinQwlDtJYnSvPzlRjFz7TVVym/:cNTCU63TtWinHzxvxRNTZ","tlshash":"fdf133ad9f9a4f63d4c0e3ecdbf94041608b44e92c6582f4eae85227b40d2a56c80df3","first_seen":"2026-03-19T19:50:42.68169Z","last_seen":"2026-07-17T15:27:27.813938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-4ee627d0.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:55.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-4ee627d0.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-596af\"\r\nexpires: Fri, 20 Mar 2026 02:53:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UBQ1RCuE8qbbl8YTPz%2BKGm2HHirTJfETFHv6vV1B6%2BRXHOp6tbmoYSHR3JRrqzQTdATE4To8Myf62Z9J0at%2Beo3GzOfQUP3h%2FT18At3SlYGu%2BFSfmM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00cb4fed96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366255,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"9464de12601fac6dc813445cb1058dac","sha1":"8ba23aef04404e515227a6c8f00719d147b568b6","sha256":"4ee627d082f93a514e26a0d2809e0892ce5177cb9a29ee19dad4092740adc581","sha512":"e53226a1727cd510fe4ac3720371004784ae09e932306b3af513ed0338652c9715ecd68b973212725e07a67a1cb2ee9770e6d34775660d09618a1bf3c3aa3522","ssdeep":"6144:nAvxsalJ0zEkZ8w71ZACkFDS3vyf58rBeV05Tat/I8t:Av1ozdZ8w71ZACkFDS3vyf58rBeV05Tg","tlshash":"9274e859a590117caf27aa7597ce9ad8f23cf561dc018ee8f20160094fc7bfa136361b","first_seen":"2026-03-19T19:50:42.682782Z","last_seen":"2026-03-19T20:02:41.838257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2032,"receive":498,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uksn","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uksn HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usng","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=usng HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-9447ebb9.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-9447ebb9.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-3a23a\"\r\nexpires: Fri, 20 Mar 2026 03:38:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FB8ov1Ibrxo4XG8aYOVaAfcpI37CoSFgDSHVZ9qrG3ZAZupdGYT961zj7NxJAXohSHNKn%2BokZ6vV%2FnFMdE6xs1OHK7gUaMFguiITnvONyYoRZSe9WE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f61d6b96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b4693dbdbdabc829037bf3cc2206546a","sha1":"0bdd4b9f3cd55f993c46a703642a2c8201f05b04","sha256":"735b2b199e033837c3df751e7b35c70f5b73a182be948320987ec1cc934eb4ae","sha512":"1ed7921631a3274f9ff1a8d9bef6f4aec942391eb10221fd2ec25431211f71899769b0cc2ebc6b2b183f3af03d08b60258bcf0e4fcc08931fe806fa045960ae6","ssdeep":"6144:Y7KwccufKh+GkeUe25e22rbfdn7e5adR0mADU0h+ApwZ06E9kt3pHBAu4:dEufKh+GkeUe25T2rrte5adR0mADU0h1","tlshash":"393407957302b13683e256d2583a0506e2356a48354789acf2fc4ddf3d6a98a71fff38","first_seen":"2026-03-19T19:50:42.651312Z","last_seen":"2026-03-19T20:02:41.832377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/tron.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/tron.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uErP94DbAAIQK13nFzcsF%2F0RPzRO9%2FxRiOOo6fBQ9OJECoU86YGOKdwqbZ23vg%2BABIZJRBqdA%2FKWL8cYV8PfYL7IHINql6rsxO0dbrS8Zfzih6dcprI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9def00f7b8a796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T20:45:55.392299Z","times_seen":547770,"resource_available":true,"data":null}},"time_used":1831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/xrp.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:03.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/xrp.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65447f9a-2226\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=715LV6QAQ0nwBRlWUjdS6%2BZRPppEPW72bbU%2F3GwFwl7MgreDPCKZ8P2qXKHQcJLPdfrfYrcFJgNx05xmvIBW75OGBY4d5n%2Bd8R1YwJVpY9TjYwSEDis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def01000a2496b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8742,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6767f426a113f93041c5e3ce7311eb32","sha1":"bc2dde29fa50642c1dae5e1516d0567d4aabf316","sha256":"93a9cc4ce06f4a3a12e1772e9b5c196bfaa6b7c47d993086f5f909193fc117f4","sha512":"178a2f986ea9c678042d8f35d97c388e9cdb38df54242e57cd71f3c4de91f231e14f128c1585386b600a53549014e3163c5654074bdeca8aa4684b6d366aeb51","ssdeep":"192:wIxWtWKAA61bKF2S5GRgFRoGt9HCBj5OEYGT1:+WKYkmgFRR/HCBjQEfT1","tlshash":"e4027d7c4eed3b5863985582ad1849969f09709fa0d84d38e1c47348e2366f52eb3f2f","first_seen":"2026-03-19T19:50:42.683933Z","last_seen":"2026-07-17T15:24:51.191057Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/vendor-a1578b0f.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:55.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/vendor-a1578b0f.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:49:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-14628\"\r\nexpires: Fri, 20 Mar 2026 02:53:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckHA9UOeHyGortt0mUZazRIoJfufebMqWAU55RomdHUXQX9yyiZ1eLZ5Fg25Q0MEQcr2nvbxfeLFH%2FZ6piPTw4zCkIftLaLmNMX9en5utmZJsLylsNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00cb4fe396b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83496,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"8ab554849ec2508bec941de1311e7939","sha1":"ee592dc946ac389dc209b8a653d1f9a702130108","sha256":"a1578b0f40f7e40ba540faba8739acaa9be43d30a98a6d087543b359dc1d6f86","sha512":"dfea022a3a162f1e678b585d0716697891bbdc8be185ce3f0ecb3c61e09af15d3c442726d93a3973e8cd5a60c18fcfb6cb1ec54f8af441bb3510fa360da683e7","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/b:BnNIClDsIxuVS8n","tlshash":"0783e4e5a9c465fc6f2ae2619b4766e8f13cf661cc01daa0f109415d0fc7bf60613a3a","first_seen":"2025-12-28T04:21:32.22796Z","last_seen":"2026-07-17T15:27:27.740895Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/platform/dev/config.js?1773949799402","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /platform/dev/config.js?1773949799402 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Nov 2023 05:05:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 20 Mar 2026 07:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8lQn3bzhv5zHuHMHCKtk3htGWeMMuj0FRwEK4vEyzIlsns2aSOAt1J3wkLbyCupvjGk%2FLORcQBx8irl6%2B%2B2qm1nkDQzvP2PuTtbxCAlVOTF5iQNXkU%3D\"}]}\r\netag: W/\"65447f98-18a\"\r\ncontent-encoding: br\r\ncf-ray: 9def00e65aae96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.748559Z","times_seen":509,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usct","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=usct HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=ukca","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ukca HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usgc","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=usgc HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=usng","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=usng HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uscl","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uscl HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-736fc0ad.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-736fc0ad.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 20 Mar 2026 03:38:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nY40UOhsPV5Vk7uJsRgNfDc9WeFiIMCDlphfbLx%2FqwSkmqRgViaFmIr3Haw2IwpGyBpdTfCHOdPRcqnZ%2BA4LLlNR3ReyG6mieWlbt1VlRCRHYb7bxHs%3D\"}]}\r\netag: W/\"69bb6b10-24d\"\r\ncontent-encoding: br\r\ncf-ray: 9def00f68e4296b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (588)","md5":"dc7a7291fae3f86797db8f368cfd5bab","sha1":"93fb2a60770b3ee71327809eb35ecb38e42aa5d6","sha256":"c62cd848be097e1185025cbaa16aea8ba0b2742a9309b477a17760057f7fc96b","sha512":"a160a301e4f3da8949690bd47dd43d267ff0bd5acb3d3a586d03814eb5411b62874768d3c4bcc7c4a20cb83c6d299e6bd842f9de4cdec63c24f193169723d66f","ssdeep":"","tlshash":"b7f0291f2969c17a5bf288ace2131820ea0c1e013338c0e4b20e0b166b384e5d29ea24","first_seen":"2026-03-19T19:50:42.687027Z","last_seen":"2026-03-19T20:02:41.818168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszl","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uszl HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-d253bac1.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Mar 2026 22:06:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTyDEEk7Obw4EOF1mFXYA14y1J6eKij%2BWJ5jZ54Gx9XIQz%2BhRJiRMg9Bp37QPmF7VKxH0i4uCQuVLZX2eSk2eusb7KWT1trQoBq%2BhyoByPDszN1lgic%3D\"}]}\r\netag: W/\"69bb6b10-3d\"\r\ncontent-encoding: br\r\ncf-ray: 9def00e68afa96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-29T22:52:22.714836Z","times_seen":424,"resource_available":false,"data":null}},"time_used":1411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uspl","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uspl HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/6cfef12b495f476b8c4b2fe3fb8a364d.jpg","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/6cfef12b495f476b8c4b2fe3fb8a364d.jpg HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Mar 2026 16:41:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b58fb5-d69a\"\r\nexpires: Fri, 17 Apr 2026 15:00:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2nF48n%2BqmaoEZytSyTWoswNIJmAQNq5yoF2SNPFO5eVNdNLAsL7NQXcrmBokwTWPUxytGGJrBnDlkakg3nDqMXc41FtOudAN5tOdAIFZvYpr4OD3H0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7986896b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54938,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1016x1016, components 3","md5":"9d462034cd750302a7ebcafe87d5290f","sha1":"fa702a2b18fbf1aaa160d4954d0139ed01bb6fdb","sha256":"3d606ac091ef8e2f9f80173ae42ac3950ba2a2759d350366b3687c1fb8545eaa","sha512":"ba1f145c0f683e3a37abb7b52fb0fa98caf847bc88f634cf7404e17f5bf09dfffd4f5ede20e249f8a83f9269255bedf3ab2e268633742d00332ef9697b35d6d5","ssdeep":"1536:C62OguyrTvlRxHN2o3RnyWgd/qVBplSdc4udS/yl:kDuyvl8ERyW0OucTVl","tlshash":"a633f17dfbabd329f4b909f4017b031dab9218a7db5d1863c79aad580574b022d39384","first_seen":"2026-03-19T19:50:42.688708Z","last_seen":"2026-03-19T20:02:41.824096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1265,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/xtz.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/xtz.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-16f3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVWY1cWw9v79MPuw9ml4cPLyDmt7IS%2Bxvd1Fx9ikc9E26ISHHL8RxLN%2FVckts8tDjbdCs4eeoAgYhzd2Z1Q5si6%2BZcLBEZGh8nJIDttl%2BlJ9PtTxoTI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7c8b096b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83f2cfc339448fe49cfe30e3869aa916","sha1":"c1dcb4e27e07168c6473a88fb7fbd6cb3432d721","sha256":"fb15b88dc71d2a3248d7e0e06bf168049f0a1fb620765b412dd671f346e1167f","sha512":"483034b54abc65f314618f9be627102e8812944da30c5dd7c405c25da4443d91b9745333a04b851ce571977f725971aa5ffccadfba416b551c7f3bcf92c60ba5","ssdeep":"96:cPezM0REGiTQeWOl8D0H52wA6c7L+nmwE/8CMqTQMMS5s:cmiTQeWOr2F6c7L+wECMqTjMEs","tlshash":"1fc1ecdd4f965f7bc480a3fccae60044268b54ec38a5a2e4d7e85263b81e3654844ee7","first_seen":"2026-03-19T19:50:42.689794Z","last_seen":"2026-07-17T15:27:27.812553Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-736fc0ad.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-736fc0ad.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 20 Mar 2026 03:38:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4BLWdw1EiffioGI5X5aocku%2B1%2BnLM1S6XyUs3gO4k%2FQafBCl3fJ0srFsSrdCnCc6nEyC7hK3hHXLxc5TbM6N7cvJ58INTBmeKt5Y3UvERK7OkofLeA%3D\"}]}\r\netag: W/\"69bb6b10-24d\"\r\ncontent-encoding: br\r\ncf-ray: 9def00e69b1696b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (588)","md5":"dc7a7291fae3f86797db8f368cfd5bab","sha1":"93fb2a60770b3ee71327809eb35ecb38e42aa5d6","sha256":"c62cd848be097e1185025cbaa16aea8ba0b2742a9309b477a17760057f7fc96b","sha512":"a160a301e4f3da8949690bd47dd43d267ff0bd5acb3d3a586d03814eb5411b62874768d3c4bcc7c4a20cb83c6d299e6bd842f9de4cdec63c24f193169723d66f","ssdeep":"","tlshash":"b7f0291f2969c17a5bf288ace2131820ea0c1e013338c0e4b20e0b166b384e5d29ea24","first_seen":"2026-03-19T19:50:42.687027Z","last_seen":"2026-03-19T20:02:41.818168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uspl","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=uspl HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/texchange/getCurrencyPrice?currency=USDT,CNY","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/texchange/getCurrencyPrice?currency=USDT,CNY HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/currencyItem-79396aef.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/currencyItem-79396aef.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-c48\"\r\nexpires: Thu, 19 Mar 2026 22:06:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZBs7EtxFoE4B50pexarr2Enpat5Dy3rCRTcGb2EQeKIZIwLn1WjNm0kvsuT3wLD24IaA8RgondJ9ZzrVFGgJcvYpzHvyChl110Vk%2FJ895q2W7hcYww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e68afe96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3143)","md5":"86efc4a2389c43649dc875a7dec292c2","sha1":"97ba1931cea97542d97209104d950470835baed2","sha256":"79396aef650ae5d697c0de3db4274125d9e46eb668f36f4718734e305f220358","sha512":"6114050c87fe9d0d08133ee51d67b36b06dfadbb9e6783d77e16443ccf69ad1c62b25ee628388871fba4887e8fe1628b797e4e27a14919d4340bd84b13e23a16","ssdeep":"","tlshash":"db51fc40a31a033dea7bc5436ac5514ce06c568bfac741cdf98f26661fcb29327b5b19","first_seen":"2026-03-19T19:50:42.690794Z","last_seen":"2026-03-19T20:02:41.814457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=uszw","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=uszw HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: en-US\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0290cc4b2152ff3f197af01969121459","sha1":"29d44ff0afe3863bec18c043e39e9f2699e2749a","sha256":"1cd19b717a274957f06966bdbb24f5ba37f2b3d63c92db0071c702e26a99e25f","sha512":"0369bce8a8ec11a87a3d6b0552b349fc6a21482aca54b6550e6b69f39dacf19aa24837fad1285e0a75fc9883da3605395dc8524edc35f0b75a017cb00437b61a","ssdeep":"","tlshash":"f880002b0a0ce083f823c088030a2200002c3080abe00b002e28023008882a0c000a80","first_seen":"2025-12-28T04:21:32.174541Z","last_seen":"2026-07-17T15:27:27.729475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/icp.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/icp.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-878\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8tUHzDjEulUvQXh5REiiGWNFrs75zNpeUVBKQqwQB5FGy4zFCuBOh2TTPNNzH6IGExxmlV2nNuKrc2XYG5N9KM7dFiu%2F3oyMcG28JclLGeg38Qb4Qo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7d8db96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2168,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756d68840faff1029bc54e7a95388f1b","sha1":"b850eb0012de7d3f5d52e41a0022b107d05c7dbc","sha256":"2042110206ddd0caa7f7e4abf7e8e7a9dbd52b906561c08c1424abed86428303","sha512":"3d8fd1e26a6638443a888e9c31844c88f9c152504507413ad43dfef56ca03116e86b30fd59b226ce835e4c09763591f02ef96c86641ac790ad1acc1410ee2852","ssdeep":"","tlshash":"4541414e9e64df66a1c057bc8b7c8c70686608ed704790ccface9472b9083d84cd88db","first_seen":"2026-03-19T19:50:42.691836Z","last_seen":"2026-07-17T15:27:27.784441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/shib.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/shib.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-2d6e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uuZRgEL17cDCTAUIk5IWlhtEGYoHU8M9EvPAh9SqpEQoOWlrxS%2B7g8Hi5vE8EM%2FxxVc9c0DVjFcLBBMGbVtfoZUsoJWDZAe%2FdbRTEo8yXuebBaMObs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7e8ff96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11630,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d9bf3b5cbdde2340271518e113990ea","sha1":"b2a5786f152a7a965bbc3ceb5788946498ab4bf8","sha256":"b6c16271cf672cdb6561fa27204a3cb5409e09d5eae8ab79c9881d7df2f18194","sha512":"bd75aef7568bc1b427fbf1f00dbd2f5a7b8f61517331a7c05b5b6a907f0f5dcb1fc8be588fb063c6edf3c0ad3ce68929ccb04f10dbff3c28f7c6fb638f291052","ssdeep":"192:cvedOnjb6nzuPcSMRdzEdzz+MirGj6QV27Zn/RDa9Z+SrAfXdU:cBnjSuEVunV27ZAjzrAfC","tlshash":"9a32329d9f894fa6a481e3fdefd54081748b50dd2cb993e0d7a85677f8082a90c44ee3","first_seen":"2026-03-19T19:50:42.692871Z","last_seen":"2026-03-19T20:02:41.827352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getMt5Amount?coin=xauusd","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xauusd HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-d7c550d7.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-d7c550d7.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-3242\"\r\nexpires: Fri, 20 Mar 2026 03:38:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvtR%2Bo%2FbB0dcvVrxUQ8zjN3tFkwOnPEG24z6VGEWRZ9RfEbMSKxSZ%2F%2BcEJR1QCWMMmiB3H%2Bp0dcEtJimZdYmBn6yHk1XH5J4B2Z4jihZaiU6iTwZIKc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f68e4096b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12866,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12597)","md5":"7be74ddd93f7ce181f152da6355c5bc8","sha1":"7310e6fa4a14a264faf4f95dbfa5407c6a731172","sha256":"ecfe5eab80306e8212574fde11894ed82d9dea95c619149c4e5157d611a3071d","sha512":"422671c4f2f4049d5ea7b88fd5d8468674bd8590abbaf7f9d3a77f4f535e7fd89d9710984d5caf8e7d397434c63d806646df57e6844e479625e24c525dab3683","ssdeep":"384:Dx0TP2284tjpoxcmGBGMlbFjK7NvE/Z6rt:DxIPN84tjpMggMJENvE/gt","tlshash":"8242c982922a92e553b54b4845123371d114763cb5888cf117dc4a037af6f87bb9bbe6","first_seen":"2026-03-19T19:50:42.679704Z","last_seen":"2026-03-19T20:02:41.829904Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/notice/list?key=POP_UPS_NOTICE\u0026modelKey=POP_UPS_NOTICE HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-07-28T19:41:49.785191Z","times_seen":325,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-fe73ef38.js","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-fe73ef38.js HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-5493\"\r\nexpires: Fri, 20 Mar 2026 03:38:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1Zi36eHNRZlVgy4SMdboAaSJsXEffp2Es2D8WHaZc3%2B%2FhK%2F8oM8OM%2F8E7L%2FK7A0OAb66zpuc%2BWzTuFeb8Y7eDM683A1Ut74ZFm5HBGfHAoT%2F1RLKQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f68e3c96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21651,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (21646)","md5":"dc15135aeb93d7b836127f35f0d862cd","sha1":"7bb8528fda3b8e57fde2800588af34bb51536ea4","sha256":"60164857636603433949c942d52e1bb1a467b97e1e75ddd6e4940a9d958c6e85","sha512":"92fecf2c7c6e5a7f9ce783e8288e1eaed697a3f235749b835877af15b18e0b6113bb1ab79ea7fa0c53806afe49ef518cd15910516d52f7d64e1b77da121ac8bb","ssdeep":"384:5n9lMums6BheNe0zAgk0IAWTsQGU5aXj6T8QYGzAzT:5nfMumFh+zDIAN4aXjYq3zT","tlshash":"4ea25619bf156a3de437a09c820d7164212e3bf5b20d8054f7be0438db29aace977797","first_seen":"2026-03-19T19:50:42.662795Z","last_seen":"2026-03-19T20:02:41.807463Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/d3779f163ef14ab5a57157f943cf8c52.jpg","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/d3779f163ef14ab5a57157f943cf8c52.jpg HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 02:40:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b227a0-13e5\"\r\nexpires: Mon, 13 Apr 2026 12:05:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdzUodxL0ZlB0rAPEQNjl%2BO8rWYPkI1yLtgspLl4QG%2BgB0AVov6cR%2FTkqj24%2BACNdVPcudk%2BFmCS%2BMj3paxR91CDpphkVFHECHD5z43hwptThsu4DSs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7b89196b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"9d09a6cba59031fa7cced6f4c93edd31","sha1":"d89b7015ca221366e7d01dc6aee6c9f474354338","sha256":"fead80e50480816c7c7883ff9d7225cd1f842f8c588b52af1f641021c3fec044","sha512":"1dd5c7e319378691d5b6966936e7529f6a999a9a2b1a197884b0e0e4ea4ef0aa7f76d10ef0d7105ce7616d2bc574cab287546c6eda0a7fab73fd4996c57f7617","ssdeep":"96:R/Rb5lc27EFSbbXdbuDT/X95L3wnOysuLzFu8UJIBIR1qgNxc60TJ95mAFKF21mI:5Rb59USbbXdbYTbwO+Zu8UkkhNxuTEOp","tlshash":"53b18c839e0f6ca8e68ed0b906d4f22fe37293011a6b7c476d041bd75e4e1800c2fd6a","first_seen":"2026-03-19T19:50:42.694743Z","last_seen":"2026-03-19T20:02:41.826842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":955,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getCoinList","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:01.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: zh\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47427,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (47411), with no line terminators","md5":"0cd6737df27af87f5ec24ea925a7558f","sha1":"8d2ac7785591df2fc5a2df4555f0d75776128e5d","sha256":"ca100770a90cd4a1be08545e882d7a168e26af5893ff81319e7abca12cb89743","sha512":"8fd068816181f4878f464e237d92f8efec188ee58291dd3d1d6069d23b4ac25f6a29800ef8ff6ea8d9a18dab09723643cc272facae5d74c594988d633fdf59ed","ssdeep":"384:g/KBRruLj3qK4ydR3K7A+CP3rhEUyb2K+znXz:givruLTb1R3K7E3rh+nknXz","tlshash":"6123ff55652c55bdc4aac0e12eaf7e23608d353fecc98e1e93cd49998ed8ab0550bf03","first_seen":"2026-03-19T19:50:42.695641Z","last_seen":"2026-03-19T19:50:42.695641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/profile/upload/ee01e21a1e324148b024716c7a36cc46.png","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /profile/upload/ee01e21a1e324148b024716c7a36cc46.png HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:04 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 02:39:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2275f-cb3\"\r\nexpires: Mon, 13 Apr 2026 12:05:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2Fz%2FWC%2FXj2qhqCkFwNi1%2F7IF%2Fq%2BFgPIN7zRltWKiWiY2tExDczIXbDT1TYLlA2z%2Byyx53JSajSPgnDsJbk2%2FqlFHDJOq4DAGTz8Hf%2B2Pw0Zp8Bq38JA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7a87b96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d63796e117cbe7987d57f3b2b99972ec","sha1":"dcc1162fa4591284bc705cc2f1bef2845877acc2","sha256":"8f0514ed11d2e73797627dc14d6a104022f335af457f990bb7959890d5877253","sha512":"67948f2028316e0e227c4cc3e5215c2ec7b0b3cb5026643b9faab0f0352f30924eecc341bb612dad2be130144906ab8d8823dd9cba44f3f061dab8ece44302ee","ssdeep":"","tlshash":"24613cc11fbb14cd6e8d4eaf610665659b2c9a8823d3cb5fe0ac99914690b344327264","first_seen":"2024-08-20T06:14:36.687708Z","last_seen":"2026-04-06T16:16:12.575715Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2054,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/resource/svg/dark/dot.svg?2.0.1773890320195","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:50:02.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /resource/svg/dark/dot.svg?2.0.1773890320195 HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:03 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 05:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969c8dc-714\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNwzmjMsYt41tD%2B9odFIBtjCa4vn8t%2BcuxZW7%2F%2Fzix8OpgYdEc0xB6NcJXED7Kj1Jd2SzgngIgmd0UUMQ8D92zffqTBgnLSOUSg9lgPR%2FI8Ss7Arj3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00f7c8c996b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b59a7d7f42ec2196f0ef4d3466245ebe","sha1":"8d2d9f864e9af130b19dcd4a90a93d00cdb4770b","sha256":"91f9494b9907b407126ac703da429124a50fc1d4ad533ab699fd0612e2d01846","sha512":"ca9b05c5a1e496442d82f9698765f47bce491f92ed59eb478ade215255951cb1e5ab89516624beffeed0e89896bf8012b4b856f68686eaddce9413d57bac84b4","ssdeep":"","tlshash":"0631718d5f088b71c185a3fcfbe811c5208a807728a743e4e7d89677b40a0f199c4d77","first_seen":"2026-03-19T19:50:42.697834Z","last_seen":"2026-07-17T15:27:27.808408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexbit.eomjdvkaec.yoga/assets/index-8c00cdcb.css","fqdn":"nexbit.eomjdvkaec.yoga","domain":"eomjdvkaec.yoga","tld":"yoga"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eomjdvkaec.yoga","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 06:05:04 GMT","end":"Wed, 29 Apr 2026 07:02:38 GMT"},"fingerprint":{"sha1":"5D:F5:45:AF:67:62:C5:98:40:F2:CC:AE:17:91:83:25:56:4D:0E:BE","sha256":"F5:DD:00:18:A6:EE:42:7A:B9:DF:44:0C:A4:CC:57:9B:B5:85:B4:8F:2A:F3:69:49:5A:80:BC:F4:5F:19:CC:94"}}},"request":{"raw":"GET /assets/index-8c00cdcb.css HTTP/1.1\r\nHost: nexbit.eomjdvkaec.yoga\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Mar 2026 19:50:01 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 03:18:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bb6b10-5b58\"\r\nexpires: Thu, 19 Mar 2026 22:06:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQzixC6NZvf3t2w4XKzmWOeqrYIA91po63f1wtizjDnQYyCPFNvJWz1tXXhcUKk79jL9Zg2rhktC6i5XLeRGqEKFiqD9vqj9eAHu%2BDAI%2BcieSnsqzSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9def00e67aed96b1-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23384,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23383)","md5":"c4bb13c8cd156f90f20f06d4c1afcf48","sha1":"22b09775615daa6af14ef0197c436ace5cb07b00","sha256":"8c00cdcb64d144cb7c3f5ad5e76b4ebf81882a92b3fbfeaadd36f228bb66098b","sha512":"e57e6bd3388553f5b902201a75201557cd8669a96758c33209fafcd2d0081a6408194956e5fd76d56326db512d1fa9dd9abcab0a7daa8c2c72e8f5f16ee0b717","ssdeep":"384:tcSRbFJ7amdx0itqn431nxPL30nOYiw5cqZUNRE0qt:tcIbFJm6Btq431nZ0nH8qUNo","tlshash":"ebb262597909753e283bd3e93a95494cc124fd41e2034e98b3a761a50ddb3eb32f392d","first_seen":"2026-03-19T19:50:42.699058Z","last_seen":"2026-03-19T20:02:41.834825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.nexhubitgyg.cyou/api/common/getAllSetting","fqdn":"webapi.nexhubitgyg.cyou","domain":"nexhubitgyg.cyou","tld":"cyou"},"ip":{"addr":"34.80.15.182","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexbit.eomjdvkaec.yoga/","date":"2026-03-19T19:49:59.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.nexhubitgyg.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 07:40:48 GMT","end":"Thu, 11 Jun 2026 07:40:47 GMT"},"fingerprint":{"sha1":"E4:1D:82:E3:4B:FB:27:3A:8A:1F:75:AB:5D:BD:53:84:F5:75:AD:2B","sha256":"EA:CE:4B:FF:DA:47:C0:E8:4C:8D:67:22:4F:9D:81:D5:E3:74:79:A9:FA:93:C3:65:DB:E0:68:48:01:43:0D:84"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.nexhubitgyg.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexbit.eomjdvkaec.yoga\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Mar 2026 19:50:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexbit.eomjdvkaec.yoga\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":1207,"timings":{"blocked":480,"dns":50,"connect":221,"send":0,"wait":221,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}