{"report_id":"d756e7d1-6d46-4efa-948f-14c46dff212f","version":6,"status":"done","tags":[],"date":"2026-02-25T18:42:02Z","url":{"schema":"http","addr":"saltuspro.net","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"172.67.143.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"title":"SaltusPro","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"saltuspro.net","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"172.67.143.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T18:42:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51140,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.606548+0000\",\"flow_id\":1690470176848418,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51140,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.064034+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51114,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.624079+0000\",\"flow_id\":432016841819268,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51114,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.050308+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.632253+0000\",\"flow_id\":549211466946849,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51126,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-02-25T18:41:40.055585+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51142,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.640839+0000\",\"flow_id\":1611706919031070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51142,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.069918+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51132,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.650764+0000\",\"flow_id\":105113996024259,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51132,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.055747+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51148,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.653323+0000\",\"flow_id\":298185660831990,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51148,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-02-25T18:41:40.071926+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51156,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.849257+0000\",\"flow_id\":239001011526709,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51156,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-02-25T18:41:40.302133+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51222,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.861152+0000\",\"flow_id\":2216457641719764,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51222,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.325588+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.878165+0000\",\"flow_id\":2170074142396511,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51198,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.315487+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51212,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.879466+0000\",\"flow_id\":1234097689392914,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51212,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.325394+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:40Z","timestamp":1772044900,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51184,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:40.884962+0000\",\"flow_id\":1425700475416787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51184,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.307411+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:41:41Z","timestamp":1772044901,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51170,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:41:41.694841+0000\",\"flow_id\":581943412699144,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":51170,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":6,\"bytes_toserver\":1324,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:41:40.307208+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"saltuspro.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-25T18:06:13.517527Z","last_seen":"2026-02-25T18:06:13.517527Z","alert_count":21,"request_count":21,"received_data":6998522,"sent_data":10288,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-10-12T15:33:58.168765Z","last_seen":"2026-02-24T15:48:10.384371Z","alert_count":0,"request_count":18,"received_data":448789,"sent_data":8733,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"h5-api.saltuspro.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-25T18:06:13.522904Z","last_seen":"2026-02-25T18:06:13.522904Z","alert_count":49,"request_count":49,"received_data":916020,"sent_data":25328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-02-23T03:22:40.289374Z","alert_count":0,"request_count":15,"received_data":130599,"sent_data":7192,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-02-19T15:44:14.989928Z","alert_count":0,"request_count":1,"received_data":5022,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-07-28T18:44:07.251621Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T19:44:59.576739Z","times_seen":2152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T21:34:04.992233Z","times_seen":1695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c8ce3f50fb953a3119d1f04d892873fe","sha1":"03527b3b679c6ff8bf1498f59118ddb0bf643020","sha256":"2b2a5277eae756e284eaf77b3ee3ca4603fb7c1d2c849a303724bf08e73b3581","sha512":"1af140d7a5d051a6eadece1578e8429ff1375e3d2ca59b8d4dc0ec117e289eb26d955deb2ed26b0af3ce0e1ade9b6287c45b5b2fbc53d185a8c29241653788ab","ssdeep":"","tlshash":"a7c08cc4b0c23e20a642651410af38e4d02c842bf08c5b02dee8dd893f620b4933bf98","size":154,"data":"","first_seen":"2024-08-29T17:49:52.046975Z","last_seen":"2026-03-02T23:08:53.847466Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ee25df141b731e0db791e93312275f46","sha1":"c7de81b170dd04f2ec1244ea637bd67689a2e383","sha256":"ae4221e15a03cc0a37a1367e77b5065b2e6982a21f9bcd3c4daa1338db1695fd","sha512":"e42f5cec4374f848e64dbbc39d7fd67f02f214e3b9b3a8015f48d537257f6282c1b65422bd779b3d779f03192280698a84a5a93c9c4cc3fc5d7c3de3e2cf9a04","ssdeep":"","tlshash":"bec08cc4a0e23d002606641020af34e49024402670481b028cd4d8492e230b0823be98","size":140,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-08-04T07:54:42.986164Z","times_seen":4245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbd2e722dc1c0e1ea48e6c30d63a3790","sha1":"277ea5cfb982bed2c1bd6e2e2ced098e71b8f276","sha256":"f0e792b00d24ee1d4d3dac97ca15accd08913962dac8588e58fedb8a1e823068","sha512":"3224b7e24005f843e0272127b5cef398d9690e8776276f992df717334a76562e29b9fad832ed23abf67984de561382b0172c2eccbf2fe6e77f83120a0b7fbe64","ssdeep":"","tlshash":"7511c2fe191ab02d6303405f976b7511643150a9001a544177ccdf9dab9af6dd0cfb8d","size":1054,"data":"","first_seen":"2026-02-25T17:59:20.238122Z","last_seen":"2026-02-25T18:42:10.681442Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4960895c746dfa908d21cbacd8b21bb8","sha1":"86c808fea849e1915b206c8ec1f952144d1a53e8","sha256":"9c6f9052795b24b7a44e4b46615fb3b664011c2b44c38aae55380368ea8117fd","sha512":"7eda14f6770aef2c9e9977abdfdeab0d5404d9cb6c091c8e9612b20acf542d3205ccb20b876be4f6d7702b15144e438352d6418253bb9e163b4d0873446b0b99","ssdeep":"","tlshash":"63c08cc5a0c22d209a26691010af24e89034402670485f528c98e8493e224f08233eac","size":148,"data":"","first_seen":"2025-03-06T08:06:41.486911Z","last_seen":"2026-06-11T20:19:16.573078Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-04T22:07:16.98112Z","times_seen":4427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-07-28T18:44:07.264037Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-07-28T18:44:07.277008Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-07-30T19:44:59.570838Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-30T21:34:04.97172Z","times_seen":1805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-03T14:06:42.938886Z","times_seen":1719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/charting_library/charting_library.min.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/vendor-mwVb00cY.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"85de237a4961ecd9c9114af67fd30bce","sha1":"855362472755636850c5d06d01dedaaf66cdf3de","sha256":"b941a69ef01ac903d02221c271f1f8f131b56cf56a70ac69db58de6ad5360673","sha512":"573d290d83cb2d046472666598b9ff61db4f37bc18cc78042325fe9771a797ed42e77c33ad6b3ee17839eb109127b618eb52bd1aa790261505bfcf8896002c9b","ssdeep":"49152:2qcTs1zrW/mNMd4hRG1aos12EU5IHjdOL503MfDSyU7h+y+MXmPv0TzRZN6AnhhV:pR3Y3AnN","tlshash":"21b52bb8b291b07543a770e5007f0907e739691b704f84a8f669d8da7cbc94aa177f38","size":2275844,"data":"","first_seen":"2026-02-25T17:59:20.250281Z","last_seen":"2026-02-25T18:42:10.683757Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-04T23:54:28.498217Z","times_seen":3414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"27369faeba2762e736258c0c9574a0e7","sha1":"be7ebbf2fcc9415c65cb9984ec5e7e98227524e4","sha256":"4be4401b4fde8249fa49202a6b717b19a8214dfc2aeee5143076daed51fb1598","sha512":"efbdadbdbc19520c981267cd8c79dd8167a6bc4443b5259721a1a955a1da3151ce82af7ecd4e34ffc1a100b2653991c3c31e052b5981d30f58d51ae106b254aa","ssdeep":"","tlshash":"adc08cc5b0d62e0026026a1411af28e4a0284026704c1b078ca4d8983e220b08233eac","size":142,"data":"","first_seen":"2024-07-18T09:19:30Z","last_seen":"2026-07-14T15:30:37.256871Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca2c8a513ba4ddd84c4c4857faf9f8b6","sha1":"29c6e6c68ff201ae5b1df93335a1170398f20b2c","sha256":"4466292d90055a17bde39e5aa47cf9fb23a76ce5d88f990de0cb7983d451a0df","sha512":"e886ba9c1a87b369d2ccd457d266da56dab3237f1446981dca3c9fda74e822dde664b62d3272bbe59b1e04b5ab7c49fd34668ad0e99528ef6850c3def75f668e","ssdeep":"","tlshash":"33c08cc4a0c27e509622641820bf28e89038402674485f529d98e84a3e760b08233eac","size":147,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-07-30T19:44:59.579299Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5f3ab12d935926923cd234cc86c658f0","sha1":"4ceb77001ba466756e20d597568bb3fe1da01138","sha256":"0a207956f29d9546e41a4e3b8354ef52baeeb8ae4c8a5c82252e64f528425a4f","sha512":"1e822812677eac95e857a87c73cba93104bc07719a8144e63731529672933355451f9f0e38ca48254f749e7c8dedd76d149ad6feec1527523b08f069d1baa928","ssdeep":"","tlshash":"f1c08cc8a0ca2d001612745010af25e4a0248027744c1b128ce8d8582e230b08233e98","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-30T21:34:04.969701Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cb0661944fd6f726de9cb8d41d03f277","sha1":"e3c83deb23d3e7cb6530db0f707d30e911010756","sha256":"dc657a87733e0eea7cd5e17e4bf81aab7127676448973ab55d2a6850c346d459","sha512":"c4a3eaf67ae4ef3318bc5b16cfd45674e3bc984db82cedfabf2b2502205ad9485dfa9551315c90cdf0aef65a2f6b73c807d60056ea806e7472c35d69213e6261","ssdeep":"","tlshash":"3cc08cd4a0c66e506602681010bf29e8a0344026b1c81b43cdd4e8883e220f48233e98","size":148,"data":"","first_seen":"2024-08-20T09:58:59.114626Z","last_seen":"2026-07-28T18:29:36.111387Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/index-6rCwyYpM.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5287ca0b10c03e9fbc8736f84ec84b61","sha1":"7953dee69c4fd16c3acc883023d7315ede52ef63","sha256":"81de3bdb891144705aebe55ea80f7f993826c802bebbc22e02d5a7782a7eb025","sha512":"22975612d47c0cc69d47b88effeddbf1f7563b7d4e9882dfe2480d15c7885417b4504767a0c4b2aea205f20dc209a31cc1b1e9cbca0cfda69549766b95070acc","ssdeep":"6144:ejUolI4Wx7Qq9P7eXLQoJ1hHGylBM2KkNH+vV:ejUoS1QqJEmcBXKkNEV","tlshash":"6fa4e581f94aca7debf7a464509d2500324c3fcad00889a6f6fd9d062756db8736eb34","size":460314,"data":"","first_seen":"2026-02-25T17:59:20.249047Z","last_seen":"2026-02-25T18:42:10.635044Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"947fa9460b78da5bf3a36d0aee89581e","sha1":"a0c995bb6c193c67227966c99d556cb2de983606","sha256":"2386ecfc60e6c3e655fa3e95d0c50b74329d5c327e06f7ab50274c983786b2b3","sha512":"f6acca9061dd2b0be3a166bcfd4c141e1ef510c37ebbc692b8d23831b116497ec33bdf1cfe86969ccec4dff01c3ee5ccdd7e99eab6abb5da1f617b8083a1bd25","ssdeep":"","tlshash":"27c08cc8a0c22e101616641421bf28e490284027b8481b029c94e8482e220b48233eac","size":143,"data":"","first_seen":"2025-06-10T12:05:18.846328Z","last_seen":"2026-07-28T19:34:47.981141Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-08-02T09:12:22.762872Z","times_seen":1144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-04T23:54:28.468026Z","times_seen":7160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"947fa9460b78da5bf3a36d0aee89581e","sha1":"a0c995bb6c193c67227966c99d556cb2de983606","sha256":"2386ecfc60e6c3e655fa3e95d0c50b74329d5c327e06f7ab50274c983786b2b3","sha512":"f6acca9061dd2b0be3a166bcfd4c141e1ef510c37ebbc692b8d23831b116497ec33bdf1cfe86969ccec4dff01c3ee5ccdd7e99eab6abb5da1f617b8083a1bd25","ssdeep":"","tlshash":"27c08cc8a0c22e101616641421bf28e490284027b8481b029c94e8482e220b48233eac","size":143,"data":"","first_seen":"2025-06-10T12:05:18.846328Z","last_seen":"2026-07-28T19:34:47.981141Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/ac-chat.js?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-07-30T19:44:59.564915Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-04T22:41:25.865605Z","times_seen":41064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8d57e04f1270378191cc5f46c4f3d0f8","sha1":"011e10d0c77d6b42b4c0b1a7b98982d6d32b6e9e","sha256":"f9dc29fd554ae64bab1e8002a6a7e45f15cf7256ee28df46e42ba617dc7bc05c","sha512":"b458575963455da202f7f794c77a6fcc204701890cc701e5081db3fbaf356fc75557245becd45b319a7a312f336ec14f309ddf52ca778616d3c9d00ab85b05ce","ssdeep":"","tlshash":"f4c08cc4b0c32e002617765019af25e4a024803bb0481b039da8d8883e620b49233ed8","size":153,"data":"","first_seen":"2026-02-24T15:49:19.028427Z","last_seen":"2026-03-02T23:08:53.843591Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-30T19:44:59.582021Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/en-ty6Ano5R.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e00caa47ef41d0c182c28e9757adfa","sha1":"e668a57842ef1a707be4b8d31276d891b5d00bd9","sha256":"122424a150e7fd2705a449b5472db897783a267106199af42e06d35ca5c56ccf","sha512":"25699ffe8a3032740417d6485e6372aecba650a16eb6682741c170bcefb144ebec618847ddff5804fa806e626c52596f602d8625be41de89b0743938298bf228","ssdeep":"768:KGtZcEw/o7rgOY5siqAMnIUGlg2Pm0sPScHo5xJnvunSH:upongOiuIUGlgwsP5Ho5xZmI","tlshash":"7a23e68d7e174c9a05e3633a78ce2a6020f509c18755880f5fecc5fc53e1b67a7a7629","size":48750,"data":"","first_seen":"2026-02-25T17:59:20.22146Z","last_seen":"2026-02-25T18:42:10.632161Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-04T22:41:25.866131Z","times_seen":42566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.780714Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/#/home","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-07-28T19:32:04.771856Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"saltuspro.net/resource/images/light/next.png?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/images/light/next.png?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-336\"\r\nexpires: Fri, 27 Mar 2026 18:05:53 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2146\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GhZ6NcWE0DcrA1SLchimKdmIjd2TJtIGTm%2ByT1E2S6H3hBOiQnaC6Afh6VBPvPrkbqONZgMK9B%2BFjtsczkbvhoEPDk9W4WuI0OHjJjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956919ae33e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-25T16:56:23.826643Z","times_seen":100,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/5d89931e5a664a5c8f10399a9ef1deb5.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/5d89931e5a664a5c8f10399a9ef1deb5.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2443\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265C390C33032E33422\r\nAccept-Ranges: bytes\r\nETag: \"4293EAAC59FEB032DE4A5652D8B2D230\"\r\nLast-Modified: Tue, 01 Jul 2025 20:27:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1686462358747034201\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QpPqrFn+sDLeSlZS2LLSMA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"4293eaac59feb032de4a5652d8b2d230","sha1":"b1cf8998998b07e4e999de9a5c5f0dd78b2bd27c","sha256":"050438b84bd443784268f9b1ececc38646e6be351c42ec46e79d3600863a7baa","sha512":"18f5799310bef05227d46d0e1ba6e508adce2c0a50bf8527c886e3bacb20f043bef69cbf2ffef6239115a734238fa9b6e0a3cce6b120cb39ff96269a9ecac194","ssdeep":"","tlshash":"35510a7c5b34ac20758b2f9d0a40e450e5f65f3d1538122de64743971e49beaaffa810","first_seen":"2026-02-25T17:59:20.222215Z","last_seen":"2026-03-02T23:08:53.774326Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":1353,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/fonts/DINOT-Medium.otf","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saltuspro.net/assets/index-i1ncJbtk.css\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-11d88\"\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCxYMH3wRD2Un3t79PY385UwusMrlhPO9GkLdkRHYHYywmiXPQBEeemBDOcmivzR7M4o8Cn7rGY%2FrMlx0DvICtxNj9nbCfAJ47sXGps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956942a2a3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ik4b%2FhLMsY4MubPXL6UntrcsmezeVb1C%2Fz0EWiddVWlyYz90tSsjzpKpLbIjNNbgDj4aUqCKCJY%2BXh9%2BZWStim7lzych%2FvCGRxtV7nC7HU8iYMvR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956951c7b3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42160,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ae111ee118b82db7f956c523b5dde033","sha1":"f8a0abb89cf811b2cd7ca58c0a516f56138fed32","sha256":"4d69389eaff7213bcffa2e5a697c02071024b0600cf742ac160795e57454c039","sha512":"59aefa8f1a21c2518271e1ecb07b1fbd1f5a25e1b69a0e80bf4aa9b65529e19cd93b3c15a49757ed1110b3771e2ae87a068dc4fd0c5ca730c361dfa41e34bef6","ssdeep":"768:GHQWASSqtOe8OaNFXlGJITUo4Z9jsUtWi/MItUyBSuJyJqIAX:GwWoqttaLF4LsUtDpN","tlshash":"f613f2b07bc58189e93fce964fd3adf0483677d706cd8d85a1af53117ae4222d508ba2","first_seen":"2026-02-25T18:42:07.98767Z","last_seen":"2026-02-25T18:42:07.98767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzNN28r-CGD1piwk-HBZmXbdWJq9rTX56thX6Wki1Ir-BJHcYCUeg0kilun9YQviSUdtAHzZ-A\r\nx-goog-generation: 1745020353527348\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1265\r\nx-goog-hash: crc32c=gdb0vQ==, md5=6FywUDRdYn4/40KqFOuhxQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1265\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:33 GMT\r\netag: \"e85cb050345d627e3fe342aa14eba1c5\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"e85cb050345d627e3fe342aa14eba1c5","sha1":"966c36a1be038fd0bb9673e455ff3b6188f47453","sha256":"e9a792d1a596130e30d7b945e466f2691a563090f1ef06fe06fec57d7193e0e8","sha512":"3c97550a30076a06c1c785192fae5a5fcdc73aef866a69df4c5c4c891f35add2e58f895c7d671faec539ec3836898283385311e7479c7f4ef9ba7a6dd65893a7","ssdeep":"","tlshash":"0521b717faffd94437722d83839a85aeb07726082e004809345e49c5ec2a8885ceef44","first_seen":"2024-12-03T23:58:43.646323Z","last_seen":"2026-07-23T14:02:31.927087Z","times_seen":123,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":106,"dns":10,"connect":9,"send":0,"wait":18,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwpECftI2-T1gGxJTMKmTnox8hMtYgM2Ey08scNYeOxUkaoC56nJX382p50CKdjAXnYdO31piE\r\nx-goog-generation: 1745018923182052\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12869\r\nx-goog-hash: crc32c=YamtSA==, md5=pTPuze5aeJ59lPj3n5XViA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12869\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:28:43 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-30T19:44:59.546621Z","times_seen":924,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":379,"dns":12,"connect":24,"send":0,"wait":9,"receive":1,"ssl":360},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwU9Feg1LUKL0qwbC3eOEP5J6rgGL_vnjwXTK9mhsO1ub7I-UiJ5Yi0gzq0qUmp5Ue0uHjL-78\r\nx-goog-generation: 1745018990111126\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2274\r\nx-goog-hash: crc32c=m9RbuA==, md5=Z0sJmfYIMISipLHYsg87wQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2274\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:50 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-30T19:44:59.564025Z","times_seen":884,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/68af50d6ba294eb5ad837899402a086f.jpeg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/68af50d6ba294eb5ad837899402a086f.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 659\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265E613583232AC972D\r\nAccept-Ranges: bytes\r\nETag: \"69BFDE7D3F9D75ECF686FA62D197CD99\"\r\nLast-Modified: Tue, 06 May 2025 05:07:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 531088427868187199\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ab/efT+ddez2hvpi0ZfNmQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit/color RGBA, non-interlaced","md5":"69bfde7d3f9d75ecf686fa62d197cd99","sha1":"00d9b3ca148fb1d9bf92af0f4867b98fdf08b217","sha256":"29528a9ddfbfb6c42d16b4269970d56c72a28473571b7cf860159240edd9bec6","sha512":"7178c13d000b13decba9b132d7b6693ba5486091812aef6efc5c5a222c826c9cf3dbd76b82693caf2448b6c27bf3d122f292c234a891f75f881698fe3e9ab51e","ssdeep":"","tlshash":"c10168930e983f59cf10247fa8736306d9d8c1f767449784f44244a324d5645cd3958b","first_seen":"2026-02-24T15:49:18.966172Z","last_seen":"2026-03-02T23:08:53.794213Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1710,"timings":{"blocked":1417,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Zv82oVCsVEq7vFsU9wy3uPTBuv2YHYwvGOxnkav00sH02wP0JWhwqPZCiYS%2BN72ExoIAxGT2qwm5LEbvB0TjoIHuTWk3n8RkTAwu82FSEdHvZOA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693f9833e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCtooRfb5zxL9vlSDGQNL8vW9nt%2FETqb9KBcrx6BK%2FpizXjNobJUgoNeyguZXANj5osBmodKxU4xItnwrzwoze3r4LRwm2RffF57VII9U9%2B0Nw4x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956951c8a3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37687,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a101067f9f235f3610287cad52a6a4f","sha1":"83dac17403c4b156222ba587bf488d6d11a0d849","sha256":"1ae6734e8683593733e58f5d8b41dabd352db17b5a2143fb87e33354f678a4f1","sha512":"a06eb5361cbcb1e37c6e93639c4ca5e999b13f832e3c7691691ab613ece1faca30c9921e8495098a65c25062ee9c1d5cc84659a1a72e567e8d38729f29e24970","ssdeep":"384:WTi2JnszHbWTDAjefNSfajbDIFNgfuQFAVFvPc9baICkYd6YM4CfWSd6ji3MaqHj:N2JsP+ZCkCgjcFVfg4H0vJ2e2rcy","tlshash":"e00362707ac9d009e839ce821bc3acfe482637d347dd9de1559f64927a50e32934dba2","first_seen":"2026-02-25T18:42:07.992825Z","last_seen":"2026-02-25T18:42:07.992825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4CQj7GIpd0nzjq8XJiTx6Mh9SBRPvJ8lwtIEzuvPQ1lxnBL2XIxleT9J6Kls0HmPQo3a3XZOdf487XHHgLqpgcvh%2Bkh6NnKlFhlt%2BfeBLMxtNWj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956954cd83e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35978,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"30919110c1737c2ccabc8fef39b6a601","sha1":"674478b55a9f06fc006ef355a6c7a59ee35331b8","sha256":"475629787b86a90f720e5202827a18335450c140cc60f5aa262df9f0cc94ce0e","sha512":"22ef309aa90bd807dd6d4af9864aabe4e6c3e4990fc3f652a7718b76787a4dc2fb9eaa53a3e8fcda5913cfeabdd7a2d184bb22ad8e3035f5772193268d29c5f8","ssdeep":"768:Fu6u8l8ljKno99pyPVVRNgf+YK+uwP8E/:Fu6u8l8ljKnoPpcZgfv9P8E/","tlshash":"21f28f34ce8980bbd4369dc25bc7dcd0083733c706ee69d15afb50612ad532faa197a6","first_seen":"2026-02-25T18:42:07.993978Z","last_seen":"2026-02-25T18:42:10.648743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"GBPJPY\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjs%2BzsJNVP8OJxWWFLC1X%2FUXZLGB%2FtmKjRvSeT5WSLRvDrbd3KytKPgcAZCCmcG%2B3LDwukQZMCaoHwTP6dxd%2F9DZ1wnkueiM%2BsWilVDfYHRkjM9V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956959d963e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"daaa04a49854acf9bb473df83cf44212","sha1":"e28b8579abe8f410d22b14e22bd471b01cf6e04c","sha256":"30cbf624941e1cda29d01dab5d6fce1b4601724b243db0a94ddcb72a59207835","sha512":"55753f3becafeb172536444c61a791c563b26e5634e80811151c271e00fb81c9421a5cab28be084dd376848dff6b56c06ce07a897883566365e2db2961e998b2","ssdeep":"","tlshash":"dbd0237415904583108b41c64691170441d0405a1130430ebd7c55149179b6e36076c0","first_seen":"2026-02-25T18:42:07.995064Z","last_seen":"2026-02-25T18:42:07.995064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"172.67.150.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBKGOCf7NhERJ6BItop5TV0Odi2Rqwpewgs%2BTjI5LJbhKl4mS3yxRLKYXx3eV9KF4xlE40YgQyx2cs3p6YSrUvC%2FcnQr7yIG%2FMSXrkV5\"}]}\r\nage: 3273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9d395686da101348-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":23,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getAllSetting","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkJJLcIQrTLboNnjDsBLg%2FdcEGq%2FtJWxl7A46B%2Bviff1pLAMKBICcrQYKJ08mA6vIFXqBjd7%2B5ymllaHA1oAg33WOPP%2BzfYtKr9E66IN6Sc%2FLfJq\"}]}\r\ncf-ray: 9d39568eed9ff9e2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14624,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14288), with no line terminators","md5":"440d15ba156110348ea3392a016dc6bd","sha1":"38c2ec8995c360ed61514b4c60db47e6c9924e20","sha256":"aa3312ddf80d4a9a7f35ca5b6d243a508aa685b02450b6a10c9c5f23e353a44b","sha512":"11aeae4f1650613c2944ffd8ad5cdd3e53806e3f3a4bbb78afe077599ae3c5c797641d4648bfd140de869fc1cc51a301be21cded590b56863ae0075470d0f1d8","ssdeep":"192:rKRLaNV2S5g77Wlvc8tDgysilTPjJ3+muuUtCoXmKnzMX4sY7kMfekMckNzeoykC:Qvbv7QmcyPCXLobExTy12PliV","tlshash":"1862629632ccc87cd9b69afe90773fe6286c3467d580ac4596f96f1c999ccb20c1b109","first_seen":"2026-02-25T17:59:20.229187Z","last_seen":"2026-02-25T18:42:10.674618Z","times_seen":6,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6f03fdd34796404994799c134cae0fcd.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6f03fdd34796404994799c134cae0fcd.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4925\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265C390C33032093422\r\nAccept-Ranges: bytes\r\nETag: \"0A83B34E04C80F0F1AE5149274173A61\"\r\nLast-Modified: Tue, 06 May 2025 07:33:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8740341821668478442\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CoOzTgTIDw8a5RSSdBc6YQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0a83b34e04c80f0f1ae5149274173a61","sha1":"fd56b7553ccd79d43b1666e4b1fa4ebd07d580d3","sha256":"6e67ff6b7a7535f7983838c3483a03f363573368ca061d2586db4a63866574c7","sha512":"a7c8c312fffe8dee45d84721c3ef9c22690948d76a1ef5899bbdb6eec7f35c5f169b8bf00ab90e8c0ab3677e568459ce6e83f3ae3603f90bb7e24d81f083bdfc","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/x37bmNnx5i/JgLKWTgyg+bZMdQ:gIIHUCD4wa54NF7g+mu","tlshash":"28a17e48a4404847564e467f7a7fbd274b7b99d21250ce089d9e468d8f308262678a6e","first_seen":"2026-02-24T15:49:18.908807Z","last_seen":"2026-03-02T23:08:53.792772Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1929,"timings":{"blocked":831,"dns":8,"connect":269,"send":0,"wait":270,"receive":0,"ssl":548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/4c64ba4b35fe43c196a53ed2bdf6d28c.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/4c64ba4b35fe43c196a53ed2bdf6d28c.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5830\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265E61358323216972D\r\nAccept-Ranges: bytes\r\nETag: \"19C80C7EFE2EF7877318F929DB9FE4F6\"\r\nLast-Modified: Tue, 06 May 2025 07:30:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1707329918664526120\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GcgMfv4u94dzGPkp25/k9g==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"19c80c7efe2ef7877318f929db9fe4f6","sha1":"cd7b1fb7411f236a51d618038bfaf1b3712bc2a9","sha256":"2875991b7af514aa04ddcc8af116cf31e47abcc49837d23338c6a164ce56a2ed","sha512":"1639a51bee2f69c0009c5913e7fc55662275d136344c7e97e33de443964c78d69a3f74c2220b1bfa2696c54024d45ebc6d1d9d5a2b9f61a4888204222226b4c3","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/x9tkgNVPydj1FGtxxTAWQrbFe5:gIIHUCD4watNVubGtnEH4","tlshash":"78c1af45ac424825100a4fd26e4afc80cf3c9bd8a34e6a0cbcdd536fdf109a92c16f47","first_seen":"2026-02-24T15:49:18.975104Z","last_seen":"2026-03-02T23:08:53.825953Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2045,"timings":{"blocked":874,"dns":1,"connect":288,"send":0,"wait":293,"receive":0,"ssl":584},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/notice/getAllNoticeList","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgwl8Wk4fc3pi1RwhPwI%2FDPATJmUcKGiKm2xYRycaf6t4Saj%2F4xkeeuhHVRjLPjKZHPjynD5ChGRtHiLtwdLil6INzVbpjQHh59dvDCC84b4gcEZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956934f693e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"AUDJPY\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFApxwGpmZ8rPvYY6iwrUKpaPk2fykO01ltZBRk3soY5jivCiRBN5XL7EY8Jt%2FdXojmCUt%2FC5eav9k%2BVMbOO37TfcuQQCKo8wDW2SEl%2FDnm3jABl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395695adce3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6302a57985397c3e7684366a142fef37","sha1":"00645a007189731bb3b44136d72e3957f0965201","sha256":"277e00753d227bcb3ed6cb19b243dc45e856555ca41b2dc955bebe89fbe44a04","sha512":"70c1e87997a0539621041e410a43ed900c0776fd37b1242d31f175d0d4acdf8ee7ea188e8db3004c2c73f3a04d4a6eebbd418b4b10777e6a01e394140db5cc35","ssdeep":"","tlshash":"2bd022aa94e041a214dba3ca01810b2780a0105d02a52348aadc9b65a1ccfbe36425c4","first_seen":"2026-02-25T18:42:07.998708Z","last_seen":"2026-02-25T18:42:07.998708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getCoinList","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucMFY4bhGBCHwNrgXbQoRjeFjg5toavhUovS4XgpEBVgrcR7%2BGqa%2FlXUnIJz65z7h%2F9TYa29i%2BCh0ik5GCg2AevGuJpqXgzdKiks6dIX2WTLNw9O\"}]}\r\ncf-ray: 9d39568edd6ff9e2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18266,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fb1ab0d10506f374e9fcb96a7beb8c84","sha1":"e1127c94b924090c427fca52aed6c540d771c81a","sha256":"06eb5e4f2c677c0c89cd0c255c4886d41f0a875059487e897bbab5d1c8f90e72","sha512":"5598e39f05ca7fbd11a4f76be2d64595030dde53c557062cb57be000616e705571e7230fcd758130f7174f5969abf596c41fcb006bf416f75059da36c75a9bf3","ssdeep":"192:tX+huXE/WXoQZXd2iXLOvX+q2iLuXJGyRSslvf7AkflytfAkDgu1kfmg1kVwXakA:+g3ESd6wwJ/7gLhZZB9LuvFn","tlshash":"c7823256622c947dc57ac4e11e7f3e63109d352fe8c58e1ac3de4d88ced8eb1690ab06","first_seen":"2026-02-25T18:42:07.999764Z","last_seen":"2026-02-25T18:42:07.999764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/platform/mgbx/favicon.ico?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /platform/mgbx/favicon.ico?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2147\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0puGjWqGePRY9lkj6VkavGaub3hzrO5V%2F8ME4rC90opz%2Fs%2BjdChonoO1s%2FftnQocdzwIgd4jVaaeNUNwkgtS3Kg%2BtWJkCxEibAmhxI%3D\"}]}\r\netag: W/\"69974a84-1842\"\r\ncontent-encoding: br\r\ncf-ray: 9d39568fae443e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6210,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced","md5":"19b29cba287aaa488b3d72273b33ba6a","sha1":"a9a16e2a0368551a9359dbb9e5bc642c29802966","sha256":"85597217fc981e9f72807ed790cce1e5218a53f2c2e08c07452ca2042ede57d3","sha512":"fcc066306a22ebf6998a15889a85c82dfdb06773802a193352c7d454998796c341456bb3f71fcb1a6e52ce9f2e67621d06428ea0dc7ae9e6cca9a5c35a494eaf","ssdeep":"96:0k446/M1MnWBIvOxXd8rOun+f17LcB4K9litFQLZ/SUWgsV8DE2p8KVLZ6:0LWibvcX+qun+f1fcB4K/ituLZqrIjw","tlshash":"03d1e599052ef060c0ba47a7bf72dbda711a6e849750dcc3e23d424cfc9455aeb38b50","first_seen":"2026-02-25T17:59:20.204446Z","last_seen":"2026-03-02T23:08:53.78607Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYjtGyenxbelTHTxJqvuG3X8avXnJXyKGk%2FVnKoFBdQ5B4zO%2F2eiRjBqtFu5b%2FSPJE0dG1VIzuIqb73P84HRLYfCG8rE1UcJTPfY6vyZur195tEt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395691fbf33e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f9fe4b4454545a7a3c502d42ae079713","sha1":"91792dc725b6cb3d3923db5089cb0f3b745f25a3","sha256":"24f2a03da37a54346579df7e704f4999b53b5e223bc5e881a3b91f2241a8e658","sha512":"d2a208ab885fe7296d4be1730802af59cc6238885da9251c9b69e3f88b790e71444f68eff1a3189b3a0e2b68f362b148b2cbc6a9b679e0552a18e7dd7339aa63","ssdeep":"","tlshash":"469002551d18c242a88308a595271204012431606628924c9c5d512580881736040858","first_seen":"2026-02-25T18:42:08.001889Z","last_seen":"2026-02-25T18:42:08.001889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDUbEzfEDsd8HnnwaWkNrxpGm%2Fww%2FHeUYy4C305p4H%2BoaFfLQSJPIw4W3GhssVENYReHYwoNa%2Bcj2dFsYrRaLk9DOEnewRkNQsDQfPUboFN%2BK%2Fd4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395694098d3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 67\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8d5CXFsiCCPx0ugJcyunK1%2BG191H67qzvlgyHWkQxueczfQTX8FTdBZDiz6IVRGTLkpbutGpTFQCViVFatAIexPP7EMKt47sJ%2FTEJ8YlheRNoBR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956956d353e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96594,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"71897e802b237bd8bf58e3ca3eccb81c","sha1":"3e8e1ab1bfef2effe84d19b6eb8f1d527e3ccf62","sha256":"e5ecd2f9074c40d08e6af2098bec3a7b722b345a532149d7de4b2956aa55f95a","sha512":"45190abc3c4aadb45aa603a91962816767ce3a468a4e58a7de7e2737e77985f090f34de5681eb4b65292babb05d771ce86be47384e587d6d3c87ef5ee762178c","ssdeep":"1536:OwsgtO8bOlRnNRh7QwMi4jvMG17JtaLORspP9t4GNJwDPo7FhWurf8TTU4NfrhP:LG8qlRnNRhkwMi4jv1tIORsJ9t4wyEFu","tlshash":"6f9359f10a5ae278d432acc71bd7ecd08a2773c359ef6d9141be20142f94ba6a355363","first_seen":"2026-02-25T18:42:08.002961Z","last_seen":"2026-02-25T18:42:08.002961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzjnPbRgqFVmE2R7mbzoWIROKDfqhtdZjavD3btk_Bxg6U4PYPguQR3cyvmg_5C0Dzp7m4WL1k\r\nx-goog-generation: 1745019064372382\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9740\r\nx-goog-hash: crc32c=d0/XYQ==, md5=V7VWqtqhYHeDi7LvHTUU0Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9740\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:04 GMT\r\netag: \"57b556aadaa16077838bb2ef1d3514d1\"\r\ncontent-type: image/jpeg\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57b556aadaa16077838bb2ef1d3514d1","sha1":"f85a35bca10b9f1edcfa8c1697436d9569f4cd2f","sha256":"a657211e0a7d76e9c8e536f6c99e1bca3b335e42d03c857ef1615ab3f4675da5","sha512":"48bf1e4b91578de3c293203a774faab28de03c1e0cde2a734ffa867243723851614b0d52e89c6af368f470edf69dac8184c3f7b13840e38100f01ea1297fb8ff","ssdeep":"192:jvVBLKx0QCmJhGtRfIUiN99uvV6TJhDgYxBVtoBaye:xox0Zc99uN6FhD1BtJ","tlshash":"8b126a17ad41afc8fbcde36894ea1b3af363e62317ab8205402b591650cb93c480f579","first_seen":"2025-08-29T09:33:23.939266Z","last_seen":"2026-04-07T11:52:26.970303Z","times_seen":87,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwoVni-3zr2NBl07z9TKpvILxyIfT0MX13nsHdG0gwlHo6hsDCSKycE8hW8eJZGa6ACrAfPU04\r\nx-goog-generation: 1745018951660884\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9807\r\nx-goog-hash: crc32c=bTyaFQ==, md5=EtlyJGF1nO//AtkHaj0nGA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9807\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:11 GMT\r\netag: \"12d9722461759cefff02d9076a3d2718\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.519332Z","times_seen":824,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/svg/light/notice.svg?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/svg/light/notice.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ue3QpaRk1Q%2FEcI0sWQaXUsg1TU1cp0uMJf%2BSx1Rnmn%2B%2BSi%2FPucYFb5oHj7aPiPf04F87AVkrto1nQeKSvhHHdDGnj4QSlv%2FE9UJJiI4%3D\"}]}\r\netag: W/\"69974a84-3e2\"\r\ncontent-encoding: br\r\ncf-ray: 9d3956965f6e3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e399bf50254fa4b12e8a0959d171d0ed","sha1":"f45a07a56d5901357826ede835840a6a700209b2","sha256":"417f5f8e092161317f0e5cf2c41082a699ff951521208adf625391363ef2a31e","sha512":"e3b97813d6e0e1cfd57d4fb580b54a6a2e249059e25a750c83dfa3346a6bb093fa35ebe32d87b6321b4bff91253434071a14796ba3f2cfe3ec195ab752f9a288","ssdeep":"","tlshash":"2711eba8c249922c9164a38eb9788941c818608775d0dcbda25d2d944b328fb6f985df","first_seen":"2025-10-12T16:34:39.877907Z","last_seen":"2026-07-28T18:44:07.244001Z","times_seen":30,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.saltuspro.net/ws/71e5677f-922b-4c8c-aff4-072e5b59ab0b","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /ws/71e5677f-922b-4c8c-aff4-072e5b59ab0b HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://saltuspro.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 4FX8qmAPP8wmkDG5s7rIkw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Wed, 25 Feb 2026 18:41:39 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://saltuspro.net\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: xIY4i1HWKqWx+nO7pLVKp1fg8ec=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=51e0f2ba9354a4fad5e1ac1146de6de1; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Zxw%2BV5PSuSbecnM1jOZ7yWck%2BUFqdryrVe2GRGhIpnBwCEMPvz1Wd%2Fu6w1wQQMkiM%2FnPZggdBTeVYLScZHg1cV25ji3XWQ6MFCxqiscE0KN52bQLBgEOaWYE35vHd9jEqgK82XNkMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d39568ca87a8745-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7785\u0026min_rtt=7734\u0026rtt_var=1709\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3119\u0026recv_bytes=1198\u0026delivery_rate=550082\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=033e43224ca621c1\u0026ts=459\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":0,"dns":50,"connect":57,"send":0,"wait":432,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/en-ty6Ano5R.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /assets/en-ty6Ano5R.js HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-be70\"\r\nexpires: Thu, 26 Feb 2026 06:05:52 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cubNU%2FCJr0kyqLRFNsFsod9wjSsCe1k3Zulx91zNvXNqwPfHOfUZaXJpwkk4C6iudPQbrdJbm4xBWjnFYYKO%2FG14CY9RCJuZ%2BAAuegs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395690a8653e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48752,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (48293)","md5":"37e00caa47ef41d0c182c28e9757adfa","sha1":"e668a57842ef1a707be4b8d31276d891b5d00bd9","sha256":"122424a150e7fd2705a449b5472db897783a267106199af42e06d35ca5c56ccf","sha512":"25699ffe8a3032740417d6485e6372aecba650a16eb6682741c170bcefb144ebec618847ddff5804fa806e626c52596f602d8625be41de89b0743938298bf228","ssdeep":"768:KGtZcEw/o7rgOY5siqAMnIUGlg2Pm0sPScHo5xJnvunSH:upongOiuIUGlgwsP5Ho5xZmI","tlshash":"7a23e68d7e174c9a05e3633a78ce2a6020f509c18755880f5fecc5fc53e1b67a7a7629","first_seen":"2026-02-25T17:59:20.22146Z","last_seen":"2026-02-25T18:42:10.632161Z","times_seen":6,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/1ebb2376c5dd48f7a1df146a6952d4ef.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/1ebb2376c5dd48f7a1df146a6952d4ef.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5089\r\nConnection: keep-alive\r\nx-oss-request-id: 699F426593A7E9323042D0B4\r\nAccept-Ranges: bytes\r\nETag: \"7D08C0918A37EF7C4A7803CC1D60D32F\"\r\nLast-Modified: Tue, 06 May 2025 07:32:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 437787349929467240\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fQjAkYo373xKeAPMHWDTLw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7d08c0918a37ef7c4a7803cc1d60d32f","sha1":"0593086aaa9eda4031c2e4ddb11abe29e2234756","sha256":"cb355dd7f116335df96f105860d50a00693783a46867c380d46bb5dca14c732f","sha512":"8526693512dff9a39f89a83b14291ac79f21ffecc0779d92c8eab2ceea348007d54b123b312e1e51d7d64c70c2fc592f63dadeb8ab9d1cc5e0d17bb1fa7957f8","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xWKRYZnE20JNVvqZ2nsqrC3:gIIHUCD4waYKRF2KNRqosq23","tlshash":"61b1bf053182c90d2c4ce9d73269ac448df2f6a053d98e2cefff429bea20d503e11b18","first_seen":"2026-02-24T15:49:18.974178Z","last_seen":"2026-03-02T23:08:53.810692Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1777,"timings":{"blocked":884,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":595},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/48f4e91a76aa4e0f96519eb9e18bc1d0.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/48f4e91a76aa4e0f96519eb9e18bc1d0.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5329\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265AB4B81313808561F\r\nAccept-Ranges: bytes\r\nETag: \"1E9A93B14DEB324904D0A1DCD1232D1D\"\r\nLast-Modified: Tue, 06 May 2025 07:34:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5021727362936346893\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HpqTsU3rMkkE0KHc0SMtHQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1e9a93b14deb324904d0a1dcd1232d1d","sha1":"31ed5212c328683ea84d099dcacc3dda9879c7f6","sha256":"64c139830f2d1bdad85e09e51fa8c51da8dd43b9b53466ec74aef0d5f7976592","sha512":"fd552a917e0d0cad7bf99e27bc5c00831f90bd1742ab269d149eaed4ca771662d7314f19f8735bb5179e274e43b8d8961bd0a0ce1f0efe9fff6ec3e2f6459b9f","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xdLrAyAMC0256B2r0gjO9wjybzXBYW:gIIHUCD4wavpAMCVoB2fjcXT","tlshash":"0fb17f877801481a390906ad753bad438657d70e735abe04d5fe520f8b41a22ad3e38a","first_seen":"2026-02-24T15:49:18.976077Z","last_seen":"2026-03-02T23:08:53.787499Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1417,"timings":{"blocked":1126,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/614edb0c13d64fe398846c644e242455.jpeg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/614edb0c13d64fe398846c644e242455.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 251\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265AB4B8131384F561F\r\nAccept-Ranges: bytes\r\nETag: \"179E45FA5B7A04DE36EA34D27B7906C3\"\r\nLast-Modified: Tue, 06 May 2025 04:58:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11945627775884748038\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: F55F+lt6BN426jTSe3kGww==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit/color RGBA, non-interlaced","md5":"179e45fa5b7a04de36ea34d27b7906c3","sha1":"cc420d32bfcc7147b44d8727ee8898d7158e73a5","sha256":"c35433c06bd42a4e041d9e0dbb8fd15d0d58dd2b0c7e7c97dfdba7df87b3f3c2","sha512":"37dc1e8522613b688d1cfd1d182531b80dc97c75e7391b236ca828b76d17aa3cd3cf7e5f723b080ebf022e45eab2e47b8d98a660455473c79e0abe791fadab82","ssdeep":"","tlshash":"b4d097c7b361bd24c3c466332a4983104ca092801350630c04044235ace32c82ceaa42","first_seen":"2026-02-24T15:49:18.981019Z","last_seen":"2026-03-02T23:08:53.806049Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1654,"timings":{"blocked":1366,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dS7I0NNY4Gj4Hb2vpDFcSWNrNATO1VCFCU0YJSlmPabsrmijyYZA24mx7n8e4duBVMJFNkiCrP%2BrgbIFptvznIr9W%2FxtEQNH3GshREj7QoOwwAif\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395691ebdf3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"80f90a3de63747a9c2ad87047bdbf1ea","sha1":"60b01b4d1b13d0e0bed0c9a9b55c650ed70a8012","sha256":"cea29991250716b1cfc8c4e166eee96bb6ca36c969a8e1520c81d5ec74b12339","sha512":"2961a85f8aa58a43ddcc9b6279ea0e63e9ce97da65bb71de24ad3182dc1fa71bda56dd3129bf9a2a882ecd2d9ea84755d7615f4b0c2fcd1f1b2a4735dbc3b713","ssdeep":"","tlshash":"e09002651c188243a88304a996161604002431a06a2492884c59522980c816220408ad","first_seen":"2026-02-25T18:42:08.008687Z","last_seen":"2026-02-25T18:42:08.008687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/type/defi_activity_type","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5ybgyIubUCt7UuSzOjflq80hepqaAVxVddFBALaeQB8lrrncgHoXDw4ohsUzmy8qjt%2FZwX16w%2FIaBaD1DrTmFuz%2Fmq8m64ceq4%2F8meijkdXFqfn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956934f6d3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/fonts/Arial.ttf","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saltuspro.net/assets/index-i1ncJbtk.css\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-ff9e4\"\r\naccept-ranges: bytes\r\nage: 2148\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4POIvv868JVMvxWZsYzOpJiIXwS%2BDA9paS2%2FlunkfiJUTBXmIXioZcpJF11CTLstAWA8451s0aK9S3QZMGGb0KGI8gV4GY%2BZqKpXP%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395687ba203e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/15fb14dc57a545cea5ba3eda096a6d5e.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/15fb14dc57a545cea5ba3eda096a6d5e.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4957\r\nConnection: keep-alive\r\nx-oss-request-id: 699F42654C8B373639176381\r\nAccept-Ranges: bytes\r\nETag: \"7762F0C5570CA50D67C5EE196BAB4505\"\r\nLast-Modified: Tue, 06 May 2025 07:31:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17015802455317525069\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: d2LwxVcMpQ1nxe4Za6tFBQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7762f0c5570ca50d67c5ee196bab4505","sha1":"2fe35984f7483bef4f641be10ab686a6f3372752","sha256":"b581dc65b94e2037a66d0875652b6d16c1326af7b0fe0c0aefb3e9eb2dc46052","sha512":"bd63df41cb4dd411b0964c20c25e9879e5edf3692dd44b4dc93bf6ef6c6273b02b892c19145f6e3942d722d257d4bb2032ad387000f93c768dac603ce8d07d88","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xgx9FTrKk1Ad8NvrmPtgO2:gIIHUCD4waq1SNdUmPk","tlshash":"80a16e47e418426a114e094f3a6f9a8541fbd595f3949a2ceceed25fc710c02387c7f9","first_seen":"2026-02-24T15:49:18.916724Z","last_seen":"2026-03-02T23:08:53.786779Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2002,"timings":{"blocked":854,"dns":1,"connect":286,"send":0,"wait":286,"receive":1,"ssl":570},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/95fbb973959046e49662d48f114487bd.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/95fbb973959046e49662d48f114487bd.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 699F42664C8B3736394D6481\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Wed, 18 Jun 2025 15:06:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.550492Z","times_seen":713,"resource_available":false,"data":null}},"time_used":2089,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":984,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5WlcuE3GwqkzIotLxbxAF%2B902a9dZ3ffwNRSVCBp4Wzl2IvZbQUq1al4vC1S3NCjzhheIjzwJcG0TsbWEsPvQym92%2BMvHTqcvVucnqw%2FKOzodle3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693a8c03e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyhdAyBUDN3p7RQqKripewRLa8gE%2F8vlWdyZwE744neuhqM0LEOK5zpJNypKFqL3OK6pbAzTMx%2F%2BPmVrWnQoqVWefV3cy6axVo2ytun43hbaVTbx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693d9363e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SM9X0QgYZusq%2BrQOy%2FXqEFH7uNLQjj6S1jxVM8EZRR46XvF2Efc7lAvxo9W28DGO1u%2FYZF8XkAycNTWhL8%2BM5v9C1t5BvS1VlKagB6GUTlCJrLia\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693e94e3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svyNHHXInU%2F%2B%2FVkoBU1v%2BwFaSQFTwomLE1AYSU7BDyRgaRQUaRkS4vjn9rmVRtuwDpFppE%2Bf1JFPHSNujpP%2F5PwfUvDmCiiMzUbLy00Hjmlohufj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569409913e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/notice/getAllNoticeList","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6OtnrNX3bLIt%2BBvl3XgQLGZisQIXSrlnqSH50X1Gfw0tjmOIeddr%2BTUI%2Ft1lFklEOrYmdGO5CSDBhG4De%2F6qD1mRDWMoCPGzKIGim8K%2BN76TP4E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395694cbb53e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ba99a7d20fc71a4ddfcc01354aac5f8","sha1":"0c47a0a7ef467750ce0e2e74c6722119994977b5","sha256":"fbdb23149624bf7b05ca34474eb3fcc7775d8253b1c04f4280afcaae332ec66a","sha512":"2f6502aef11994ce0f9bc09c5dfaefab10e8436a35d7ead15ccec17f7b6705c8f6b8a058590c08041dc17f9c11e0d91261485d7d0a7bacaf3ecdecf59c0166f7","ssdeep":"","tlshash":"b231a60e15788e79091588cb25dd7dcd9aaf1687d660cd30966bcf2c82f59bb1f2b208","first_seen":"2026-02-25T17:59:20.21668Z","last_seen":"2026-02-25T18:42:10.650006Z","times_seen":6,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kW4WxGvtUwIL9eYz2SnUeuZqspCAOnuEKJF5TcpEUF8GmmO29t3k3oH0wF2w3A8YN1vorjD6wsqRtHzMMw0OzJoin1EEWzmOLnWdsrR9sk823KWh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569398833e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDVxUKNVbpJiETmgMDaV%2B3ax%2FdeoGwaqI28HrZSzxeDxnCf3urGVcLBXTJ7KLOQjGZeHmijEZxZ93TLR8tK8L9GFxeDkyhdfet5tme0%2Bs9ueWuY0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693a8be3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/index-i1ncJbtk.css","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /assets/index-i1ncJbtk.css HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-89569\"\r\nexpires: Thu, 26 Feb 2026 06:05:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6Zsv9jCcYjsVOBvkKjXuhgjiyyrZdT94%2BA8pLuv57dJH4xlYtIQtHxnW%2FtOwzER%2B0sD0uzJ75azlumWJKeB5AcH7rVw4yjIEzMINNE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956869f233e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562537,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (34551), with NEL line terminators","md5":"230d37fb20f1f9bd2454d5f999e99f6c","sha1":"ed1c6ed72d6e90f01b84738ebc22b22930c246ea","sha256":"06c352f17be0e37045c99899e087af0203f43054f57fded11d5688affc8f5e65","sha512":"0937992174da61b94f5be01c3d449c0c4bf1372f2768d3db3078bba62074ede6888ecf56254850e0cd11fb6438a8be228b13400125623c2ffc597f689cb8cf66","ssdeep":"12288:GBiNJNZ8w71ZACkFDS3vyf58rBeV05TMChXTUX2Ul+GVU37P:GBQJNZ8w71ZACkFDS3vyf58rBeV05TMw","tlshash":"45c4f969b18411396e37d9a97bc99acce12cfe61cc025ee4f243551a0ec7bf7232161b","first_seen":"2026-02-25T18:42:08.012269Z","last_seen":"2026-02-25T18:42:08.012269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/c2818606e1f24896a27fa250c83ad13a.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/c2818606e1f24896a27fa250c83ad13a.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4522\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265AFAD5B36367835F9\r\nAccept-Ranges: bytes\r\nETag: \"942186ED6C6A899DA99CC318DA8258FF\"\r\nLast-Modified: Tue, 06 May 2025 07:29:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7705412628858224886\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lCGG7WxqiZ2pnMMY2oJY/w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"942186ed6c6a899da99cc318da8258ff","sha1":"99e770dbb9b7fcc1360d454b5077d11fbaab84ef","sha256":"ee4a51cb73bcf2360988913dcba4a65446f5d306d09547d21bfdbeb629c71134","sha512":"52c179d1a0a0106c60097e3f20ea0eb7c4c287050f9679535420f6a14adfbdb99a62e55d656591875feaf8a262c1eed2990dde513035540cbeca8b10b2dfcbc0","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xebjkskLY5GLVb7ugAcLmQGQw:gIIHUCD4wasj1kUERb7ugZmQGQw","tlshash":"09919d888c00091e408dc2213afbcc5a8a6b93c483483d09eef642bffa118213e90f27","first_seen":"2026-02-24T15:49:18.982607Z","last_seen":"2026-03-02T23:08:53.793488Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1995,"timings":{"blocked":853,"dns":1,"connect":282,"send":0,"wait":286,"receive":0,"ssl":567},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/svg/light/huazhuan.svg?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/svg/light/huazhuan.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-5ec\"\r\ncontent-encoding: gzip\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZuDz6%2BG9D%2Fe31nKTBGH3g2YV7zYemzlMipQXvDZ%2FpysssbhVOXSXPnE4ddTQUS3E0r0lVAckZjlM1ods%2FIyjC8BKXkKhBDvTjQ3%2Fuow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956919af53e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51866c6797d391d7d5c5dd9943563625","sha1":"cc3462f85fe72a7b640fe06ab0d4d8bd64baca34","sha256":"80d2a3b3349201d02e11cfaeaef9e12b1ef35eee62f9f352a046d802217cb7f4","sha512":"040fee6a46e48e24ad9e28af4529dd2e0f04fbda45ab6eac4ca68943e04ebdd9b85ba734d57362a6cef14d9ff3cad53f0e59e5b0e4c2abdd93ee688bd9dbf875","ssdeep":"","tlshash":"da3123eb63a5c358f689022e8734b4b1399b30c777e012ddb88c781b7f128d10d665d9","first_seen":"2026-02-24T15:49:18.893271Z","last_seen":"2026-03-02T23:08:53.773597Z","times_seen":12,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HPqykTa9AdWbA%2FGW4MVmtJ%2FFNVCp8tzM%2Bbg%2B7t%2B4%2FGuDsBKE15Q7R7H%2BOIbAIjzKb3v1QFDE4t2Fc0C%2Fj2FKy0CiWbIGCEwjZ768ZEiLl8Kmi4M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569419f33e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/type/defi_activity_type","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8Fl5apliEtHIHWhBtbPLqL6X%2FCDBpCplhvBIj74NN3MC6Po65y5YBA9pRKfntfR7DthpIvpS4f2hsyFV%2FF3VQiA%2Bl7vPR%2FTl10ZhVckpF9VKkZq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395694ab6f3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptyDmx0K%2Fw4tR8rCV4d6OnSZyHbF7B2Q5QOPZLfVne3ZmmgXU50dk2ukxPLkzNoriO4YiquAmwQET3QpdXW0QfK%2FnO7htRtRQncsFz%2BigxEV6SH1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956952ca73e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38278,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"24bfcd790fea2b05b489df0607d094a6","sha1":"4f10ef4bbd31573e089f07a0368ff99389011dd3","sha256":"47cdb515cae901ee3d5b9418bde3687edb3363bfa6b30040450cf8c7e9787d4a","sha512":"e774e2bad281ff03fc223fe15a616e5ffca553b3abe85b6cb81e3a8190d36e788f7cf434ca9e43a850d30586114f94f5ad028c032affb1c7df18ed641fd34ecf","ssdeep":"384:YawI26L6BhRxIvvw3ZO1WQu5Vdx3teUVMVncwYBn9f++a5mj/Y2vr:YaXv6Bh8wpO1WQ8VdxdeuMVncwYBF++7","tlshash":"9103a8374ac4d099dd368cc12fd3aee43c3635c3a9de2c617dae4d047ad066ad14a3a6","first_seen":"2026-02-25T18:42:08.01537Z","last_seen":"2026-02-25T18:42:08.01537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/svg/light/broadside-btn.svg?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/svg/light/broadside-btn.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-57a\"\r\ncontent-encoding: gzip\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkUpjE%2BWhmfTmqvmWERyf9iXeFrEDAm%2FheGp9M2ccZ0EtycKK3%2Fg4NToa8%2BGU8s4LOYFEbe4X96O54lDkPoX6W7YTHlLxvecU%2BNSySo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569119973e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c27867c5fa5001c284912358d1088c32","sha1":"72a65c57047f38e6a9eddbb45f4eea4c6f174d4d","sha256":"521cc1eb8e60fa4570402a808ee3efc57966814258a1f90f3d0c83780c3c3686","sha512":"c18de18544928f4a8973bc78eb61721724833483b3b071758208845a12026413c6c373a479809a3825dda32c61d1137a23fc2412998a819f7af9e7598061f9fc","ssdeep":"","tlshash":"7921f8cb730c50c1e601a3e8a41676ef029b70db4eda8e5f68599dbd771e4a32506170","first_seen":"2026-02-24T15:49:18.956226Z","last_seen":"2026-03-02T23:08:53.792105Z","times_seen":22,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/svg/light/service.svg?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/svg/light/service.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-5ffd\"\r\ncontent-encoding: gzip\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rp7W7ZwMG9Xb%2F%2Fjex%2B2%2BrKxEpD%2Fea43HCWhW7jTmeGCMFtRwQoApM%2FVLWw66RwGZT%2FB06rQyItoedSJga%2BHfNzSAtuUU1dfvy3Wn3Oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956915a4e3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cd853da828b851603870f0d3cf3ef38","sha1":"5c63345180e5903af285a33e5a0d3f7ca605fdee","sha256":"069f5d494dba6b80bedc0bcf5835d68ef020b10472c776f185a496a57f3980cc","sha512":"772c4a20c2384bdec4c1ffe4381ab0247e73b68e75f3fa02e0469945257b4a01cd7d717336c660b7e7a6b55c01a18d0dda1dab2f2f3eda820221490ebe58118c","ssdeep":"384:b8ChglOiH6GKAgYJ37JddRo0vmNdvGHiQSq:9hEG5NYJ3lddSxN4iQ7","tlshash":"4bb2393083946663f150cd1c2216be63426670ff7effaa44df8a5a32346af814f9c659","first_seen":"2026-02-24T15:49:18.905144Z","last_seen":"2026-03-02T23:08:53.805331Z","times_seen":22,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cab6a64eddcd4cd8a9d0b8169d224ea3.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cab6a64eddcd4cd8a9d0b8169d224ea3.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4989\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265AB4B813138D0551F\r\nAccept-Ranges: bytes\r\nETag: \"2EE0D2631C2CD525161EEC1B65806391\"\r\nLast-Modified: Tue, 06 May 2025 07:31:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16726134395162458962\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LuDSYxws1SUWHuwbZYBjkQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2ee0d2631c2cd525161eec1b65806391","sha1":"566b73767fce75cec494a9b97dfbb9aaa7cd8cc2","sha256":"805a1da5c909104e856f76b95955617a8c4155db013cb971a4f2c0a6cff74279","sha512":"ce281fc21c17e68a8c29e7e16f11b7b396e0c29f5b5d95e42ced58bf29698800d2303c62214af0d86832ecb62eb3a8bbb1a5c1d3ed9cc714ca83b96820f38adc","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/xVJRz1/G3Z1Pg53bTOAlnawjWv4JRJbnbqs:gIIHUCD4waL+crVZZWgLdGs","tlshash":"42a17ec8a86086ae140d4aca3f6bea1fce29654503ae7e6cd5ac530ec621d003d25f1b","first_seen":"2026-02-25T17:59:20.199737Z","last_seen":"2026-03-02T23:08:53.818291Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2016,"timings":{"blocked":861,"dns":3,"connect":286,"send":0,"wait":288,"receive":0,"ssl":575},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e2b94b5081a24efcb690a064ad3499a0.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e2b94b5081a24efcb690a064ad3499a0.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5215\r\nConnection: keep-alive\r\nx-oss-request-id: 699F42654C8B3736396D6381\r\nAccept-Ranges: bytes\r\nETag: \"A39B38C804F68E8BB5C14B3C1D278F02\"\r\nLast-Modified: Tue, 06 May 2025 07:33:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17479048048356646519\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: o5s4yAT2jou1wUs8HSePAg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a39b38c804f68e8bb5c14b3c1d278f02","sha1":"832fd79adeea0d14f5e8e7828eda4e7668bd5176","sha256":"2c5efbaf1cc23d5d2ee2915826e9ae93d7f9f583d026a5e9e8b3a6e41917a24a","sha512":"0bdd3ce70e85fcfbf788c66f72f5fd95f2d8bc61d6fd8809a35326bf9ace337cddc95b6128e80b6a13e922cac42b958205c5cfd1d02bbd34d9fbf339661cc987","ssdeep":"96:zllcHitlIxv9vk7C1+I4wWHLihk/x4io1tJB+AokL0eX9ZhWdM2S0d9:gIIHUCD4waOL1/BFPzWdR9","tlshash":"65b17c89a8020b990a0943d47d67ef42cd1de0c0824a9d1d89bd42aecb25c423c7eafb","first_seen":"2026-02-24T15:49:19.003159Z","last_seen":"2026-03-02T23:08:53.81893Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1404,"timings":{"blocked":1118,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgiB56mwT8k3BFt7xUxOuIh5wCekYhwj3mY%2B%2FrPJ4b3o3m8TjZoYydZZrIi2vH7UbFoaqnEaTPBVXGy4fwP6wK8ujs2O3skZfO5cyslaj0Z3dKSN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693c9033e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAQsaxPPQ1y3eNGAIJQE9i4b8HVEbs4ZN2V4V3B71fRluEFQ%2FMTwjTGg2mQCmW9cp65%2BPp62UhuIBGh6GoOpS%2Bv8k6wv4xMxV7UE6%2FyV4OyyUjii\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693c91e3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2UT1jNIFFtyKwhbh4OoDD4Kiz0%2BWSaSBpCTIpsQY2O8UsIO7wmwu1lhVwRteT8%2BsV7MOuNivAR%2BDzI882Ya36U%2BCjcaj34fBXd8a4pBVMgaj%2FJO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956953cb73e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36443,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"52c31d0afecdcd550b8acbe6491d9e7b","sha1":"0769b98807b2e0a334361ad912019465928c48df","sha256":"d9903043c3692dc68c891f35dc6c746937943323d6b226a96bdeb34c143d917a","sha512":"c28f0d977bbe28818163e790503eec216091a706f404ffba7f27dd14854c76a92d5831dbc282791ed55cc686a7d9d0d8ccef13ddb795e6a3caf543ae64e83431","ssdeep":"768:THuISWAR1qgpzTAMaAI85OExPcqpHMY4QtyHTHvwHkHTHBH/7u4AY9CuIrScm5Aw:RNHTHoHkHTHBHvCRNPxWPkN+23u","tlshash":"bef2b434ce99c38ad4326dca0b93ece01c3a3bc306ed4e5595df59212ad7f6791097a2","first_seen":"2026-02-25T18:42:08.018904Z","last_seen":"2026-02-25T18:42:08.018904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdaShWPN%2FxsoQIiWqzkedEgzbUcDnQ4A5rNtpT0jrBHHAjqeoLz%2BC%2BWtnlEwrZhNRInkpCYTZ4xvBw1mUpUZjnsa0Ti37XqAfvKmXnZIM3dpWBId\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956954cdf3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40676,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"176c9be0e1747f19553bdc38edf09ab5","sha1":"15f52061ccc06cbaba177b8852626d71f5506721","sha256":"ccca922db6f3c8259a804149140bbe0240076fe206515be735463a932c1ec89d","sha512":"bb9601f0fd84c335982b48f0194455a0c7244eb0f8ae9913364fe6b17c24c810612b02a198ce005f98ea3d33cd2dd0d3d2846ac2550f06f113e24135a653a369","ssdeep":"768:Kht3LTbO3egl/wVuuOVuNHHakbihgH4Y1OVrCTab9OeZ5CX+7cKp2I5Uc1KOm2+s:KDgebnDFs","tlshash":"de0341344ab49275d433ac866f876eb01426f9d309cd8dc161eb0f08fa41fe7a1997b6","first_seen":"2026-02-25T18:42:08.020247Z","last_seen":"2026-02-25T18:42:08.020247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getCoinList","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5IpWje2Sdh7ch%2BXeeKvBrk%2FZG7Ea7WZgbueFbBvC9vVCWg4CNPxDkaaBGg%2FPNCxrTxAQh%2BkKALYIzMkHIhVQBnFWIijwpgRIbtbxXtK0jtwHLx8\"}]}\r\ncf-ray: 9d39568d695ff9e2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":52,"dns":1,"connect":11,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/fonts/DINOT-Regular.ttf","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://saltuspro.net/assets/index-i1ncJbtk.css\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69974a84-b6ec\"\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2sa3sxVJs9KfciOrmuoCGSJmKXONc7QCIBu5iTWGB6LDKsDY2D6OyNI6AOpRon6DVtezQk%2BvQMQgaiRysa6IvJiQmYL5sVZFSyZ%2BWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395692fe8d3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.521415Z","times_seen":344,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/68fffe9ad4cc4a3b89b6935e46fbe4d5.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/68fffe9ad4cc4a3b89b6935e46fbe4d5.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265C390C330327F3422\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Wed, 18 Jun 2025 15:05:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-04T06:18:34.284864Z","times_seen":25747,"resource_available":false,"data":null}},"time_used":1107,"timings":{"blocked":836,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xR0ZPP5pEqOJiOnk14IEp1RJtdAyX1oVigQKAf5lv3x2TVBo8%2FFcqcey4Gds2vdb6ZTgDf8DHsFBz4Hy1zVh0aGRbOadCc%2FsGUGiWuFzuv1dUsUd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693a8c43e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 67\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUEwh6y2fKSV06Tv0GYuXmVC4C8HjUFKl83OP5C8J1ihJZM7YB5xYyxMQbjzBoATm3ymnBhTyKoN03QpUXXbPtXHMLaJEB7vHCNRFyQBvC653xYx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956957d653e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86019,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"61d936cb9d9d774db6d72b37619f7fa5","sha1":"1d8ed59f9f3ebcca298247899728508b415b8aad","sha256":"228477c16ccc17d44e1b760ccb3b2637f48be9938a7ec095e645ab935ba9f57c","sha512":"dc0cf104dacca8f61c7f7aa2862a4961a2afd54adf3a95ea6d118b2982695f8181a8e99bc5241a23f15ad47b985d0478c781cf35275f636afc91904825577ae7","ssdeep":"1536:9S7d3P062cRx0asHVXQonB6Fc4wYi9C5E06Yp+ID8lKt+/EKY:c3P12cRx0vVHnB6QYi9C5EepjWKtAEJ","tlshash":"008327308b998088d4364df66bf3ade109b335e74ecd1d15c59e54003ad1b3bb92eba6","first_seen":"2026-02-25T18:42:08.022538Z","last_seen":"2026-02-25T18:42:08.022538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":2,"wait":671,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"EURUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uws1%2BFe7EAK5N7q0K8btz%2FzTTGGc7pXas2d8fbl%2BqTsc2XefBUQPLH2rFj7g0QBi0aukrFmX0lFEoc%2FL9Y6PGJ%2F8%2B20eHt%2B71OZFWsPDtPV63xex\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956957d743e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89993,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d8af60dc0e2bd0788a1dbdd0d473aeea","sha1":"5833cf71264c70ea850f285426a1ff68635c979a","sha256":"118a3ed4433d126a7191b8b2c303ee12f45f3a5ff5cd1d2832cf7e47688303a6","sha512":"98cdfd12c96b3ffb04d679e72f26f8f658e45e14c5df2fb969f6fd5eb1bb2e9109f5d5db1aa58c73d349fc83f0d98b7c90537a668d496c52ba3d45ca0a338ffc","ssdeep":"1536:9BuAjj6lugc6fawV6SP2/zlZBDYELXbt9ZSumJamoMUy6BPwiJbj5D:9BRjAugQLXrZ/tT","tlshash":"d893e6705fd8c898d6328cd51fd39ee03d71f9c3a6ce29c341d92c08fb9462999993a6","first_seen":"2026-02-25T18:42:08.023599Z","last_seen":"2026-02-25T18:42:08.023599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzelXLJrXmT9uqWLvAlDRYwQH6WzAsoUdteCd2JpzhgHy5fzPfuCqtxqIKNHsyGeS_WiLAhT60\r\nx-goog-generation: 1745020334043985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1717\r\nx-goog-hash: crc32c=Nlh/mQ==, md5=wDYR9+ijfd9z5qYqQ+rRlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1717\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:14 GMT\r\netag: \"c03611f7e8a37ddf73e6a62a43ead196\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c03611f7e8a37ddf73e6a62a43ead196","sha1":"f5d6f08be3d751747f618cd7af90f4ec8dc3d97c","sha256":"a19e79dd72b71fadceabd2a6cfcc04b18738157e104b54cf960eb17ccd1cd6ee","sha512":"968346372809cade34940284062a06ad5811a15ff481584675cdea3d77addda5b6da00562479f7ac4a98a8a289d70cde9d409d024048039f354cbc5b200edb08","ssdeep":"","tlshash":"39313a46b4497a5e02e204ff815da62b0f99ee43f0f89308ae60d04c3d718cfc91a0de","first_seen":"2024-12-03T23:58:43.643729Z","last_seen":"2026-07-17T15:49:17.769445Z","times_seen":110,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":95,"dns":9,"connect":7,"send":0,"wait":13,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWzB3zAWeAoh3OUac5mOSvN-xy_ewsCY_92TQVRjbDsa4fx_w1I3BO-V4tOo_c4C9WLXTF5kIBU\r\nexpires: Wed, 25 Feb 2026 19:41:42 GMT\r\ndate: Wed, 25 Feb 2026 18:41:42 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:25 GMT\r\netag: \"e8cb7255942399d415c6d0c88718ed13\"\r\nx-goog-generation: 1745019025514851\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2839\r\nx-goog-hash: crc32c=WDrOQA==, md5=6MtyVZQjmdQVxtDIhxjtEw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2839\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"e8cb7255942399d415c6d0c88718ed13","sha1":"b06fdc75eb1e209cba9fad0bd5606a6ba2c459e9","sha256":"bdf49f472e48c3909baf009837595007a60f504776cedde9275226178397049f","sha512":"b8ea7212148eba88461da09375de04cc7f28e5f8a6487b8e9decaff5037acff542156ddeae584aaf45712946ab95e11b7e1b39d97f1f3b41f3faf2c84c70ffcb","ssdeep":"","tlshash":"0c513b9b6ba46137c8e04a3217503a788f060d2f9bc6dd7670c0c655b9617e2e838e0c","first_seen":"2025-08-29T09:33:23.956448Z","last_seen":"2026-03-20T19:46:41.757855Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":380,"dns":0,"connect":20,"send":0,"wait":341,"receive":1,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getAllSetting","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbUvzINnZIqM6nsZSpPfwgUr5LX%2FPRbTxsSR5JqDgBompZiyOU102RVzCScnD4cLPrT0ddkikx3yyXd90ICqTvj2Wa9JAnoNNDirRzf7t%2FpSTWAp\"}]}\r\ncf-ray: 9d39568d695cf9e2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":56,"dns":2,"connect":8,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ohHt%2Buj4mN4IsQqBcA8n5rjkAh2jcYPUiOjxUDJ7tnb3Nj0fcCi2V0s29c3PGHUV%2FGLNG6DZcil%2Fdr0jHYqVwPoY9D%2BbgA2Q%2BCchepIQhJixBzb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395690882d3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVdGdc%2BtHQG2eETRzyfl34scuq5%2BYZMWC%2Fw5kl%2BeYy7%2BIl7EiD1qkOqY2FI8WbQOSwCyfujou6CGG2lYzdY%2FTJ3ro%2Bgag4n2TN8%2BlRAOGz%2F02v7Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569419c53e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwuT2N8tOAT74t5VgqcAvL9_OXL-a9SqpG1UFSjjV80JXPnAg_CoHsjtp6xIsD9_iAppy-ZnX0\r\nx-goog-generation: 1745019091846695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7177\r\nx-goog-hash: crc32c=KbQ4+w==, md5=umkw+KKOd/Vlmi9C6Cp6zQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7177\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:31 GMT\r\netag: \"ba6930f8a28e77f5659a2f42e82a7acd\"\r\ncontent-type: image/jpeg\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"ba6930f8a28e77f5659a2f42e82a7acd","sha1":"a8486aa615dcb5fc601f66289b55a5cdd08cd8d5","sha256":"8bf7252f758e4f74fa910c3f1935501125d6589f26e2e2c8f397b3ae6ec0fe53","sha512":"35ee8e31b81d5474c5f1178161d3f908139b65e1f33bc30db61618cf0d4555bb38d0e7a6ffd06d7562ca41f51ab216b37320bdb29a968c891badff668a924051","ssdeep":"192:BnyBvvQqY4kabfz3lryvlFnkmnXGCvY1JBAQ9:By5JY4kabLZqFkmWCvKBAM","tlshash":"64e1af75df14718adbaf951d0e9e4440d2961a4a5cb2c30ef10c7de2eacf422531e836","first_seen":"2025-04-17T23:40:09.002327Z","last_seen":"2026-04-07T11:52:26.909048Z","times_seen":88,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzUE8XS_mFj4CsiiytGcQlA5RhxNZSD2S0Pg1tVAUMqPH65_U9Zq4VrWlOxqutRKm9mizt6FaA\r\nx-goog-generation: 1745019003474375\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 14268\r\nx-goog-hash: crc32c=1eE/CQ==, md5=XZj61ZeWnKYLLBULcX11wg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 14268\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:03 GMT\r\netag: \"5d98fad597969ca60b2c150b717d75c2\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":14268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5d98fad597969ca60b2c150b717d75c2","sha1":"f64fa05a8ddc3ee085768f308db5bdc1fa45dd6c","sha256":"47373b88482223e17220c976db2859b2ad928c0a8725a81a859371ca1e052a81","sha512":"b0ffafe604e293786aca6a044f6147651d117b31afa201c051689b499e25ddacde63628be24e98a99b55aeb67676d6121c182443367789b05f9535c3c2aa0231","ssdeep":"192:FNYSd3bjNhYk+506I3KsuOr/iYmT67DVDbnbQD8/QiXSXfV/+7wDlb+St4:Fhd3Nh06/iYxDlrbZ/QiXw1JDlb9t4","tlshash":"9c529e5ccc41dd1d910a2a35d37c29f0892290bb230ad0133a8defd5b3993815abf55b","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.549516Z","times_seen":125,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/vendor-mwVb00cY.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /assets/vendor-mwVb00cY.js HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-22ba04\"\r\nexpires: Thu, 26 Feb 2026 06:05:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWtpHT1u9yUz2AKjaAovXXzcJfmJGHz2F3rwHtHgVTTA7rMFUscOeanjob17HjIoi0kKhclKdLVXXXL7ZOQpgCOmopoka2jN3rydd5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39568aea833e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2275844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df836c6a7fe4ae05a827c0a47186a55e","sha1":"497bf5f216455fe55bd1e1c9ad4e0034ce96a864","sha256":"ac2d4f77e7d38da79bd71d54aa856a8396916685e5d773c221223ae2941564be","sha512":"0008602b421ea65014d342a5d6326581381ca1de08da9138cfdc8f9bddbbd12b665bde048e4bbc660e324a4ce6d86517e4a5c8b22dcea296b6d4b1dbacd4c984","ssdeep":"24576:2qcTs1zrW/mOcMd4hRGhuBgcuSros12vsG/5IHjdOx:2qcTs1zrW/mNMd4hRG1aos12EU5IHjdi","tlshash":"49250ad8b291b03543a765f5007f050bf33a6919740e85a8f269e8da7c7d44ea27bf38","first_seen":"2026-02-24T15:49:18.972303Z","last_seen":"2026-03-02T23:08:53.766035Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/platform/mgbx/config.json?1772044899337","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /platform/mgbx/config.json?1772044899337 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNxa23ikdmGbuE%2FjLX4k3LMdOsD1VhUP7yhcEJ%2F9UNsioEnsikxrvIAhxQr8je79zbluqBV2A0ioTvdpLC39Npb6M1JQSNjEYriTtHk%3D\"}]}\r\netag: W/\"69974a84-128\"\r\ncontent-encoding: br\r\ncf-ray: 9d39568cff503e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f553295bebf02c68dd1afaf84dccf01","sha1":"e2061d944f2a81994d795a3bba2319ab2ac6da16","sha256":"f0e47f01797b74cac25277649a510284c075d02a00023966e452c74723e6364a","sha512":"4400aba3c9adce5f849f6661644a0557735d8321aef4bbd751a5ee1fd38970ca52e1087b00f018ab164e93aa2cc0eef7cb46cf4e3c70a1ad64f48e2177477b05","ssdeep":"","tlshash":"2ce08c19f1320e0730882a25d8c7bd0065108f6b8c297804f24b8d0caf8f80b29f80aa","first_seen":"2026-02-25T17:59:20.196884Z","last_seen":"2026-02-25T18:42:10.674159Z","times_seen":6,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxQ76hNV06JxnLpm8QOwLurksOTpiXpkhU2V%2F6pBWTP6ESSZjtESTw%2FZYnG1vD3RhuDRuhuCaSc%2B2slTwiziw0V%2FN5wZSZbx25HafVc%2BJVZtBw7E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693a8a03e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"GBPUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xUhsEUWTkbNf2g8XsqAg15syBn5MnnSZ3fGjKQZ5PfXj6%2BUDEOLDtkOCTgXB48EljAmpFoFUd%2FhnlTi5XbXH3mq5ykhRsS6QYckVpJTVzE%2FPaOf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956958d793e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89928,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2c3bf1c740533ba54f2b2b94778fe873","sha1":"7816874e851caa7b2055ee36d3402f95f7859548","sha256":"edccf4bed4a01cba0a91568e531faa0745b5d18b30c370af5982fd6876907e3c","sha512":"f1dccfc91dc27d7f4b896b60832d611708065583cd1c59ea3a76c7de6573dc2fe91209c1ee8fbce838b6979dd977a718a82bade2a7159581ec0ecade58bd7453","ssdeep":"1536:LqSQQCpDzhe9VxvzWsB+YIWKjU9rO7HGS:+QCZhe9FB+YZK3","tlshash":"f893f5704fcbc058c5738cc24f939e983d2671c6e6dd3d417e9e18257ed8a6aa00a7b6","first_seen":"2026-02-25T18:42:08.027907Z","last_seen":"2026-02-25T18:42:08.027907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"AUDUSD\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vh9VfnkwyAPbZAQzcKsuyccv7MIsfDrN0sizflmThDaRCIU0zC8JY7v7BtrCDCEf%2BXkL2laHsQPlWrP4z3cS83sfks0shjl5H8tyUjsk0fSBF1t%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956958d8f3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89998,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d40ae5cac4d5600af1d755fd559df0f2","sha1":"3491c7b3364c3dc8bd6d47a1d8316d09a2eef0fd","sha256":"aed59b1fd919d5dc3185bd3c7a5752daec8b1615e321be1131d6672a087470ec","sha512":"fa0bb22d1198201b3df2ee082f284e193a201bfd89cc69e0343b8e232e30da9c0d6df08d91117a8a6bd75f7778674519e1f93d679af98ae7bc40e7221e7ae3be","ssdeep":"1536:F9L/kMuQEyA7ZzHIspj05dTyiskKo/Z5qb8jxJ0BJWLQ1Xb/pIBExFYF:F9F41L/pK","tlshash":"2093bf704aacc2c99532bdae4f939ee4072239c306cd1dc741ba1c917b54af199897bf","first_seen":"2026-02-25T18:42:08.029217Z","last_seen":"2026-02-25T18:42:08.029217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyQbQSI8jRyfKgu-PNxZkiLq7DPq2bjpKpqtDOxatPwWyVdaARMcr5GAih8HBoKvI8weBYcmsg\r\nx-goog-generation: 1745019071782236\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7196\r\nx-goog-hash: crc32c=tCfjHQ==, md5=kI8WMgoKMsgRfKlDwqojHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7196\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:11 GMT\r\netag: \"908f16320a0a32c8117ca943c2aa231c\"\r\ncontent-type: image/jpeg\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"908f16320a0a32c8117ca943c2aa231c","sha1":"b49e31cd823528649adf1b0fcab343e4e6055b33","sha256":"2a03254b988fdcf3c84ae977a221b83ce9d10f896b0ec508fcbe877c22ad9161","sha512":"531db683a9c449a6d0ace9b1e73a6bd3561c54d71f0421d4255b9698d7bd12c74779b7805cafcebd0fd50c437c64f29d6d761af58e57fa57874b7df5cbe1c06c","ssdeep":"96:cmO7bsMr5XAG3VBRynGlNqbRuYrkVkls7VOZ1d3AHI1K9v3Tv9Cre:0xrqGlanNbgYoWelkyZCre","tlshash":"8de19de8986016208ecac5f0598578a3d4f893cabebb7e4a44896e01c6555ad3f52f34","first_seen":"2025-02-06T02:55:20.514077Z","last_seen":"2026-04-07T11:52:26.924617Z","times_seen":91,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T18:41:37.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Feb 2026 15:28:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c; Max-Age=86400; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJMr8W%2FcJ62oEn5ftmSBuLQxe%2BKiCHQV556YE43kBs5R%2BsOEFugGZYWR9SFd5V3IpVwPEXECLGj2Mm4lDBbhud4KxyzPXu2Dipz85NU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d3956841b3980fa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7711,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1159)","md5":"b8fe561a653fe32f636c04b2fc45ab02","sha1":"9a796589c759c07713d4a294040714b3049949b3","sha256":"db94bbe242c86cce883853fc77ce0c7dafc0975c1051b64c6ecf3c519b833ade","sha512":"2db55f5803b77503c4332e9925450c25324d2716c2b0fa804820f82e0cc38e5cf5ced779f22f998ee5115766956739bdee1b35f507498b959e734155a8cef86b","ssdeep":"192:TFDXUMUqRGqWK1GOiUm9Al6BIcKZCxfu2nftZb9LuB1Xi5ifffl:FsU0pebZCxG2uS0f3l","tlshash":"b2f195a76df195292393412aabebf0046a309143865edc94b9dc54ee8fc1fd988c77b0","first_seen":"2026-02-25T17:59:20.233471Z","last_seen":"2026-02-25T18:42:10.655559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":89,"dns":52,"connect":8,"send":0,"wait":227,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/42d7d93625c842a6a0b8c054ff8e7395.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/42d7d93625c842a6a0b8c054ff8e7395.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 699F426593A7E932307FD0B4\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Wed, 18 Jun 2025 15:06:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-30T19:44:59.567355Z","times_seen":915,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":859,"dns":0,"connect":0,"send":0,"wait":307,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUGky31Nk9wvB2btpKQnPhXQeCCN8hHXsULA9YSFgcfy1QpW6e6MrZtiG3dT1TKmDIhtK1w5u7krHXaqyjvhv7Q7n55r3NVur1u7QoIXdGcKnZPt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693987f3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FKAmpUw2CKkDUBvcZydOSHEf2Wy7roMLZc0%2FPMH5T3vjcKXM0ooZ77yVG8rSxOf8Tbv1MtZDyX%2Bb1GUFCdhaWoXIn7LleC6M6g548575yoQe5KF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956954cd53e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40426,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"db6595ec1f114eed0128c33fbf54b625","sha1":"3e8bdfe22fc739350497a97e5f2ab52e0fabe5bc","sha256":"2eb32d2c9c93a92ea98ad70af847464f77cedefff9704c7bbb8274bdab4c66c7","sha512":"a23cd814e31c667c47afa9f08d85751d702bae793c22257e9fcb425e8ad3830240997391a76033730eff582b63e81563fe19450790583bd0185bc253bac9f0bf","ssdeep":"768:ZyGs9TbaRN3avSiSWigx67szfj07Xmm7VmqdEcOvhZW:gJgjuLz6DZmqdEc2ZW","tlshash":"890332314e99dc4dd8378dea4b9bece40d3233d347deae6155ab0511ba8026ee40d7b2","first_seen":"2026-02-25T18:42:08.031939Z","last_seen":"2026-02-25T18:42:08.031939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HX12r%2BMDNiClz7V1%2Fx37YD9xRJJPHNHWiUKBqEkzodqJGjQd7G%2B%2BHhQP07kJh8aVOFGJ1yHeP25D7EnFrpOyT%2F9kA6lNq9K0VR%2B28WTiUgKAZiqc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956955d103e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38023,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7b863668b3bad60df229a61310f252cf","sha1":"629ec2d1fbbce864adec0f4adea2e65a8f37c5bc","sha256":"91ba45020570709deeee598e092f4a12ba948760d59d114e4d5316aa2e3067ea","sha512":"9eed0d7afd2622cc46aaa26cedf556bd52f183bbf2e2a02c837927e659ae3093a4f9698cd62466ac670c4d6051e331b7f4e3a04e8254f282f240fdcdd0c13c00","ssdeep":"384:atGfFEEOkLy+mj0teIynOYCwnFL0MfwImKQGviR82C1G/+v+PVPIsxGL4MD:atKFmkOPUumPIsxAD","tlshash":"bc0386604ab5960ac536bc8a1faf69f0d46d39c30acdccc3519e1c1dfbd4221a4b97b6","first_seen":"2026-02-25T18:42:08.033009Z","last_seen":"2026-02-25T18:42:08.033009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzIjF83qb2OhZ1QKDVtcnnFrNp_I0fGNYVCM84koMMB1F4ABT8AoucG6-OOauttskPFbD_r6F0\r\nx-goog-generation: 1745019054266672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9320\r\nx-goog-hash: crc32c=NRpzvw==, md5=8Rfh7LmmWZKkoSeq5xR/PQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9320\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:54 GMT\r\netag: \"f117e1ecb9a65992a4a127aae7147f3d\"\r\ncontent-type: image/jpeg\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f117e1ecb9a65992a4a127aae7147f3d","sha1":"d31cb59eef02bef662f2a32927486fdb0bba9938","sha256":"c41539a30a96d819192c0088fb339eb265079a33b835550da4d67e239ea658b9","sha512":"82a5726b19387f79608c7ca92ead96d09e0bce5d08ca0c607b93412e5110607926ae426b869bd993a72ad0f586bf82c39099ed02e051fa0a573db3ff1345444a","ssdeep":"192:afKC5CG/uzpL2j2tll1RXLhL2yjT0qLiaOTMNEdiq:ayCEaQLzRbV2cTLLiaOTMdq","tlshash":"90128d85bd31deecfdaec33917d3a316e293e93b26d149a851026b1048d3a3e5217635","first_seen":"2025-04-17T23:40:09.012509Z","last_seen":"2026-07-07T13:51:54.928838Z","times_seen":90,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWywXEW6qz87ptyGjprN5CqjFfSdsXtjgVPqV4Oa0u6kn1kLIEeXWrfrZgn9kElR3XOm4XzXy-E\r\nx-goog-generation: 1745019044982235\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8388\r\nx-goog-hash: crc32c=LBL3jw==, md5=wryJC9aSNi74POLpGY0i7Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8388\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:45 GMT\r\netag: \"c2bc890bd692362ef83ce2e9198d22ed\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":8388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c2bc890bd692362ef83ce2e9198d22ed","sha1":"2da6624b154fa3c70f6d48fa0e32961622494791","sha256":"7c97f207862ee766fb394f50e87f423fd7285c44ce125fc51e97d38e54b949d8","sha512":"e801ff56b048aee4050bc1d689d8d375c5c04b5cd8c6864e4a283748084910fef16171feb86b114ea28bf4ca2da755f08a309b87f0d468b885a13ce6a34aaba1","ssdeep":"192:RX31VARGlYA23xrFPNtSbCPK+LBGVzBcv8VG51uDiXZtIJ9/2SYFrP:x3vARGlYA2RtSYL4V2UsuDiJ+b/2SYFD","tlshash":"1402cf08ff694f508cf499d2e1147aa278848df2b0210b48e3d7bab913983991ef35d5","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-07-30T19:44:59.520391Z","times_seen":72,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/resource/svg/light/dui.svg?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /resource/svg/light/dui.svg?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-68c\"\r\ncontent-encoding: gzip\r\nage: 2146\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tY2S6pTWw0UokfX4NfY6hDUtNs382sYsg0fa4HPR2Fmb%2F9BrL2T8ubpLlH53z1NsjrpWExSOTq7TQ8rP8kbUpTBVJdURW%2FWVTwfGcc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956918acf3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1676,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee023bffa0055002f556cc29349f904b","sha1":"a4590d6441adcf5d66de23aac549fbffc4b31870","sha256":"5647a81837840cf674bfa7e414c7c710fdcd8e0368870abce060a0098cfe4b45","sha512":"498258be0735f44be700d37eb9435a681695041f8397d0bb80dc526b0177b635f2c03f3e07690348937b9ddf4cbd6fdfd410ea7d9be17445b2ea7ebe40a435a1","ssdeep":"","tlshash":"a83112da63a5c344f649022e8778b4713d9b30c777e012ddf89c791b6f118d20c6a5da","first_seen":"2026-02-24T15:49:18.895618Z","last_seen":"2026-03-02T23:08:53.760066Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yE4GQKHkpOox4dx3A88a%2BNi0h0GGG6caDLH6fh2awGGCpiIWwbXNIQv%2BjQFNN43gc88Pzt4GK2RV9iOU67sssL8%2FOEGtA6FKPs8tVJGSBuia5Oy2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395694bb7f3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0b231d38a76983def42635d340779a98","sha1":"a0457d5f1b0dab07084e3e03576050ebd10b9bd2","sha256":"a8ffcd75e93e65434ce759dda579dae4c3eae98b2899add913e5116baeb1b0c4","sha512":"8b941f7f85a50cc04fec74e6182cc42fb4fbf381dba2ef78a9b2ddf054429c3fa35689a1bf3c581355c4e47d8a918b22bbf535cad1cd1d2d3e52068020fc0b5c","ssdeep":"","tlshash":"b021bb1f253c8d790d1489db64da7dcd9a5e1a47c6608d309667cf2c81e48b71f16108","first_seen":"2026-02-25T17:59:20.183978Z","last_seen":"2026-02-25T18:42:10.675141Z","times_seen":6,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvO2q%2Fg7%2F%2BvIcSWZNYjrAL%2BZviZ%2FD6EW5RKUFxE1YZdnt8AEZZfxYT6EH3uGn7eJd20VkwuT8X2NWeQZ7QHMuGaLbYtbrlfozFlOvDf2EZhE20J4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569088273e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVPJ%2B8sxH4x2BwjQmFDI2IgYe2RPSnhvaMxHpF3U0bJ6HNiXfTGuZvI1gnHp%2FLwaRR5dERgTMe7EqVTP%2BkGTtbAw6jv1I2rorAlPBx%2BxhmmC54po\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39569409a33e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPJE57V61zd6Yi47U%2Fsu9IPYNT4SSjtunfYy1k7v6U%2FZZN%2F0WNa2uDiVS6ydEqy4Bj0cAf91IIEDi27NAsebME5pknSJ6%2FRFw4JjJUL5AIkKKkAS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956955d1b3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34367,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b241b956443300e276c4305915d92510","sha1":"4236a832bb3d4aa521e0b57e3eff89a3885d97f3","sha256":"3cf5436b39dacc71ad843d2e9776bfe9570218f94fe137be98ea86fca5ff2985","sha512":"ed6329dfcbe3292a38a517a13567cb554e3a5d3dbf2ac486a4735345a4f7056d1b16c169b6ec69085ad4e86d5432c5fbacb880c6e4cba32a12ccf4eb6398ced3","ssdeep":"96:yxD/B4mxuLv9egTrH+twq3TTE6rOndPIWFIxdWrHYHTr/ihr/iTrq:0DWmxavbPetb3TToIC","tlshash":"bdf256391a489268d0326cde2f9b6fc1a6253ac74adfcdc1519f2d0cfa5435793893b2","first_seen":"2026-02-25T18:41:54.286077Z","last_seen":"2026-02-25T18:42:10.662795Z","times_seen":3,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/963b8dacccd549929f4dc2f420b32569.jpg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/963b8dacccd549929f4dc2f420b32569.jpg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 269433\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265AB4B81313899561F\r\nAccept-Ranges: bytes\r\nETag: \"21E47AB704EA1A9209D000F254F0AFCB\"\r\nLast-Modified: Sun, 15 Feb 2026 14:56:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12715785409904733189\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IeR6twTqGpIJ0ADyVPCvyw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":269433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1216x880, components 3","md5":"21e47ab704ea1a9209d000f254f0afcb","sha1":"5088430fd108cb22a5ba211581369ebb5131bade","sha256":"859602641666615c993973a4623d88aa9bbd3039fd45fc6d9968227faa2f7a3c","sha512":"a63fee2fe13a654bb8a527791f78bc0ffa1c9a207e0cc13b98b7f3db5050b1e4f29e36d8cfadbc3c5b14c34fc3ffbd98d6f655057e0bde3313184781b0d88652","ssdeep":"6144:ksSJM7pKpsy61/5fmR8Zw5xojQC4Ic4Xm6a8pFREcnglX1EmKc:ksCRpsV1BuiV03IfXm6a8Z++Q","tlshash":"33442357f05da4484ddb633ea3a4a4c8828d5035296ae948ed6734d7f8dc4047f2bef0","first_seen":"2026-02-25T17:59:20.18877Z","last_seen":"2026-02-25T18:42:10.634313Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1918,"timings":{"blocked":956,"dns":0,"connect":0,"send":0,"wait":302,"receive":660,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzeUMRMbc0UwfITly1jDiRoDHSEiaHUqtnXR44GoTMoBd0oUPYiRORxzS6-9I5lk8xC7XZMZhc\r\nx-goog-generation: 1745018964344619\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3261\r\nx-goog-hash: crc32c=YMCRAw==, md5=3X2Rj9yGkWKUNmQMIwk1Eg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3261\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:24 GMT\r\netag: \"dd7d918fdc8691629436640c23093512\"\r\ncontent-type: image/jpeg\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"dd7d918fdc8691629436640c23093512","sha1":"cdee6f46b4d5c790f3aa2c982541c7a85cc053ed","sha256":"9b62ba1641b776cc54c19c6cbdd6ba513943e00f5ab98570bcc5c3b643920228","sha512":"c793a7cf86cce56cccab025a402050ccbd7c0f2422d539858c329bb3b331a2b579d76db03e6f7ebd78a4cbfa90a2c873978238507dee8c6e7baf7a0109212fba","ssdeep":"","tlshash":"48616cd6795349161ce77d24833f066c8ac50e1f215e50956087a6ba39df6a0e0838f3","first_seen":"2025-02-06T02:55:20.496923Z","last_seen":"2026-03-20T19:46:41.804599Z","times_seen":44,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":188,"dns":2,"connect":9,"send":0,"wait":9,"receive":1,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwhDYE2Jv1lS9aw1U4MYQ1O0bJ9KbdQ0q1P9N8SxP8UknQ_actH8akQkZIvzPpU_k3sz29Obbo\r\nx-goog-generation: 1745019079859499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3817\r\nx-goog-hash: crc32c=nHBXww==, md5=+nrXU3XMeAaFfbxtWQ2yHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3817\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:19 GMT\r\netag: \"fa7ad75375cc7806857dbc6d590db21c\"\r\ncontent-type: image/jpeg\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"fa7ad75375cc7806857dbc6d590db21c","sha1":"973a54bcc76c2c86ad0a41a7eaccd8d2a2686a75","sha256":"8ed69043b1cea67b8ad4234d9fb6f18f44d424aeea7181930df009866ea5a452","sha512":"3934b78cb9f04296a8792c7ebd652454730ff8c5a97a4d7c1d6053f634a7d029d0577c20cdadb822430b57d5e59299f8e4564d9a2f4d84c8c08f10fcb3b43a87","ssdeep":"","tlshash":"1a718d22ecbbc800fc15db1a6d5b6562313b36e314d4e9f716cc0dbe2e1670486b0123","first_seen":"2025-08-29T09:33:23.930899Z","last_seen":"2026-04-07T11:52:26.857898Z","times_seen":87,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1771519117885","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.27","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:42.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:44:04 GMT","end":"Mon, 20 Apr 2026 08:44:03 GMT"},"fingerprint":{"sha1":"99:1D:1D:00:50:A3:4A:89:C4:FA:80:41:A5:3B:D4:DC:07:9A:B3:C7","sha256":"41:7E:D9:0F:FC:9D:15:B2:87:F6:97:84:A5:DB:33:AF:08:BA:D9:D0:64:90:EB:DC:4B:27:01:17:A4:B7:FF:7F"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1771519117885 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwxadx5pWoMcgiQ1m-meesT7gImdlecVm6IP3GKlInjVu7h4Ap1kiKqwkFuYLTfekW6XS4uGOk\r\nx-goog-generation: 1745018940732464\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 25649\r\nx-goog-hash: crc32c=DU6x7w==, md5=ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 25649\r\nserver: UploadServer\r\ndate: Wed, 25 Feb 2026 18:05:55 GMT\r\nexpires: Wed, 25 Feb 2026 19:05:55 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:00 GMT\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\ncontent-type: image/png\r\nage: 2147\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.518064Z","times_seen":932,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":91,"dns":10,"connect":23,"send":0,"wait":20,"receive":4,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/4294bcdeb43a48839025d2914cd69f37.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/4294bcdeb43a48839025d2914cd69f37.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265E61358323253972D\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Wed, 18 Jun 2025 15:05:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-30T19:44:59.560175Z","times_seen":885,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":854,"dns":0,"connect":0,"send":0,"wait":305,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/index-6rCwyYpM.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /assets/index-6rCwyYpM.js HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-7061a\"\r\nexpires: Thu, 26 Feb 2026 06:05:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjzdAyF6eDyWn06eWmVjHQN2r2EseqJ2snjSqoybMfaKXHXZ4FFb9oKgP%2FPK0rKRo8c5EMY4j03fzltDk6EtJI4lU43F%2F0jnzaQ7JkQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956869f1b3e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":460314,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65165), with no line terminators","md5":"5287ca0b10c03e9fbc8736f84ec84b61","sha1":"7953dee69c4fd16c3acc883023d7315ede52ef63","sha256":"81de3bdb891144705aebe55ea80f7f993826c802bebbc22e02d5a7782a7eb025","sha512":"22975612d47c0cc69d47b88effeddbf1f7563b7d4e9882dfe2480d15c7885417b4504767a0c4b2aea205f20dc209a31cc1b1e9cbca0cfda69549766b95070acc","ssdeep":"6144:ejUolI4Wx7Qq9P7eXLQoJ1hHGylBM2KkNH+vV:ejUoS1QqJEmcBXKkNEV","tlshash":"6fa4e581f94aca7debf7a464509d2500324c3fcad00889a6f6fd9d062756db8736eb34","first_seen":"2026-02-25T17:59:20.249047Z","last_seen":"2026-02-25T18:42:10.635044Z","times_seen":6,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/platform/mgbx/logo_144.png?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:39.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /platform/mgbx/logo_144.png?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:39 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-1842\"\r\nexpires: Fri, 27 Mar 2026 18:05:52 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FoR4gWwlUAHc1EiJbz2LtN45StFEsnkxbtvmgO3M%2BXpXMn4njwgobyJAnFyb8WmZ%2BYyKfbwrsW0dAcTtwPlQt15CthA08orRtzbILs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d39568f9e323e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced","md5":"19b29cba287aaa488b3d72273b33ba6a","sha1":"a9a16e2a0368551a9359dbb9e5bc642c29802966","sha256":"85597217fc981e9f72807ed790cce1e5218a53f2c2e08c07452ca2042ede57d3","sha512":"fcc066306a22ebf6998a15889a85c82dfdb06773802a193352c7d454998796c341456bb3f71fcb1a6e52ce9f2e67621d06428ea0dc7ae9e6cca9a5c35a494eaf","ssdeep":"96:0k446/M1MnWBIvOxXd8rOun+f17LcB4K9litFQLZ/SUWgsV8DE2p8KVLZ6:0LWibvcX+qun+f1fcB4K/ituLZqrIjw","tlshash":"03d1e599052ef060c0ba47a7bf72dbda711a6e849750dcc3e23d424cfc9455aeb38b50","first_seen":"2026-02-25T17:59:20.204446Z","last_seen":"2026-03-02T23:08:53.78607Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/0b5fdfa04d7f4361b303f08ec3d8618b.jpeg?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/0b5fdfa04d7f4361b303f08ec3d8618b.jpeg?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 908\r\nConnection: keep-alive\r\nx-oss-request-id: 699F426593A7E93230CDD0B4\r\nAccept-Ranges: bytes\r\nETag: \"9D890FF7B35E3A774802C39213EEFDDA\"\r\nLast-Modified: Tue, 06 May 2025 05:06:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16610468948103667661\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nYkP97NeOndIAsOSE+792g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 21, 8-bit/color RGBA, non-interlaced","md5":"9d890ff7b35e3a774802c39213eefdda","sha1":"33399ae5ab2cdc54ac2e820323d641d32be4dbaa","sha256":"50201724219cea6fbb53efeb55a9729e55787a91679063bbb554fc65a2757990","sha512":"fb4e8d5efb06a74d3992ca61f6ed39d66eee48e75ec652dbb5d08921b27de77ff5a1977e8da59c7c3c7c02f59d04c2d289111901cb246790774b689a3e1695e8","ssdeep":"","tlshash":"eb1196d25fb95900c9d17a3e0e77432ba628210ac141c6ce5a2a7b279dd31abf913933","first_seen":"2026-02-24T15:49:18.931972Z","last_seen":"2026-03-02T23:08:53.794938Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1741,"timings":{"blocked":1444,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e6acb2e3e17f4e97988f1c0373b69068.png?2.2.1771519117885","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e6acb2e3e17f4e97988f1c0373b69068.png?2.2.1771519117885 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:41:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2460\r\nConnection: keep-alive\r\nx-oss-request-id: 699F4265C390C33032563522\r\nAccept-Ranges: bytes\r\nETag: \"50214E950B83229360441C2881DEBA06\"\r\nLast-Modified: Tue, 06 May 2025 06:44:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6991071479212585411\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UCFOlQuDIpNgRBwogd66Bg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"50214e950b83229360441c2881deba06","sha1":"70f0a00b8bb3eaedfc021e65d9ce9f38482576b8","sha256":"a14dc1617b41b6343ed713bb96dbd300dcfb0ab8e4422dab3a00b8a032ecce25","sha512":"3c5b5ebde5a2be75aea545928cab45db393d4d572c76065dbdc9e8d3ce77c58ebad1a28da9f20b1e9e572ccbc5cd1ec87e6031ff35b019fdb31681b058a7d4e6","ssdeep":"","tlshash":"a451a74417154a7c2f4d1716b20a7a32ca1945831809bcbeddfc99f1eb7e16a0a43927","first_seen":"2026-02-24T15:49:18.984537Z","last_seen":"2026-03-02T23:08:53.826566Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1870,"timings":{"blocked":1598,"dns":0,"connect":0,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFFfECy%2By7OwhU1AKnTeGgL0gDQFKttk1t8kDvXd9ZyvlfQavZqP04%2Ff7f2PQPo%2Fqded8JBixHsDpP8RD5FEm%2FkE5pPvLAaBD31FggMKENh%2FUq5n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956934f643e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=bb5a7c6b5ae39f1b5e29dc9cfce7e1cd; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1u5IR8ZwGDzl7X5yzbERITjZy8B2Skwh2Se9Cb1atXWiKuw6d4V4y%2BIN%2BZWmYWBjVNAWyF3uicYZN42L3%2FUm%2BtqYd5%2BsgjU5DqRcN27lMeOAEBs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d395693b8e43e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T23:58:22.456459Z","times_seen":17715369,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.saltuspro.net/kline","fqdn":"h5-api.saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:40.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://saltuspro.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saltuspro.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=f5cb97fb2ce990cbd9d962cf8bf13bc9; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHSR1nPPKOE3irpWqv26PvPglih1fRnzWZpiTxiFQYAWwAWgcDbUdZbeSdhhxHeyTtOu848t5THUEL%2BqH3MpKW2cf18fybME%2Bnc5I3iyXCOU5DuR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956950c673e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35610,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a0ba444063680106f612450af3c45614","sha1":"addacc3c207f48f8cb64e44c8abe09927646bea7","sha256":"4837f33329f0044d27c59a68c2808b941cdeb92d3f129515cc70962de8144142","sha512":"aefd7e431a08ec623ec1c77b60cfd79718263d2f873985c6caadcac6fc0745f5442aa024cea73613c0ed253982670077d0104b8d4c6f00dcf4814a010932ec08","ssdeep":"384:MOs2VHH25pIA/JgtKHcovmOaeVdGv379UE0NXpMcu00Qpk7xoVFeU/qkTjlebwl3:MNJgt8covmOaeV3E0NN","tlshash":"87f293754e9a8119d833ddb71bdb9cd51b323cc306ce6d1264ab2001aba4b27e38d367","first_seen":"2026-02-25T18:42:08.04298Z","last_seen":"2026-02-25T18:42:08.04298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/charting_library/charting_library.min.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-2a6a\"\r\nexpires: Thu, 26 Feb 2026 06:05:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYFY6voyD6vbTHPzQk8nzxDcSp9u4Tsli2IIiA%2FDOPmGR4EQPKb9DQWZjTHn5lZFG%2FcxrsbLfZebgqotWBFanmsHq%2B0yzB7F0GuswqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956869f173e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/vendor-koayxyHj.css","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /assets/vendor-koayxyHj.css HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-1f7d3\"\r\nexpires: Thu, 26 Feb 2026 06:05:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnpmVz8ybk8LFkxSrb10R8HJV%2BXsRPXD1eeDzLXXnFkyMUyffqRpRMu73h%2BFcvCD2ywInaDkE%2B2Sl6xRQMYHAHw83Rh45gRSA3q1hpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956869f203e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128979,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"4973c922d62e3c22ff8714a4f12b12ae","sha1":"6f6c9f1c9ee0d9d6aa515aea4e53fd69992ae8d5","sha256":"d9df141ac46247a247e0af5807c6534527f667da1b358997217ce6f2bf5c0675","sha512":"529186ba6f86c555e012d778ce4e2a67d7066e66897b0f462c1fa33e13bb6dfc62bb9f66e508c8fcc2b10324f96ffec121961fddf5967c5d53c914521d8daaaa","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEn0w1Im1Ah5aIzs:ZdN0rxmNH9yDW0tNu","tlshash":"7dc3b4a5e6c491bc6f2bf2659b87a6d8f23cf621dd01caa4f105511c4fc7bf50223a29","first_seen":"2026-02-24T15:49:18.960725Z","last_seen":"2026-03-02T23:08:53.791356Z","times_seen":12,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/ac-chat.js?2.2.1771519117885","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /ac-chat.js?2.2.1771519117885 HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:12 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a84-907\"\r\nexpires: Thu, 26 Feb 2026 06:05:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqIyok99NffmYxuJp%2B5ARruoASgCj9z8x6mYXoMI7tJkp3K7NydMuCrnV2UB7jQ316R1DeWgBZ4fBhmyvk3qacQElkieuoeKX0ZWWBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956869f253e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-07-30T19:44:59.564915Z","times_seen":144,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saltuspro.net/assets/vendor-mwVb00cY.js","fqdn":"saltuspro.net","domain":"saltuspro.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saltuspro.net/","date":"2026-02-25T18:41:38.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saltuspro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 08:31:32 GMT","end":"Wed, 06 May 2026 09:29:07 GMT"},"fingerprint":{"sha1":"41:4C:E5:33:22:E9:0A:68:FC:2C:69:30:22:DD:4A:48:2C:9E:51:EF","sha256":"03:20:2C:6C:67:60:E5:14:0A:A4:06:4B:4D:B7:9C:CB:F5:BF:EB:38:8C:E4:EC:A2:6F:1C:84:67:B3:0C:96:B7"}}},"request":{"raw":"GET /assets/vendor-mwVb00cY.js HTTP/1.1\r\nHost: saltuspro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=e4d6efc4791825f0fe24b365fc4ba50c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:41:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 17:38:36 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69974a9c-22ba04\"\r\nexpires: Thu, 26 Feb 2026 06:05:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsVvzXYsYZJ%2F%2FHubwE%2F9OBMr%2F2V2XhOKyt2akIt%2BosIsyPkGBdrq54%2BejN%2FK1%2Fztkl2qmdTyfuKQzGPXoDCHl7Z17ynf6oByhcOmC%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3956880ad83e67-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2275844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df836c6a7fe4ae05a827c0a47186a55e","sha1":"497bf5f216455fe55bd1e1c9ad4e0034ce96a864","sha256":"ac2d4f77e7d38da79bd71d54aa856a8396916685e5d773c221223ae2941564be","sha512":"0008602b421ea65014d342a5d6326581381ca1de08da9138cfdc8f9bddbbd12b665bde048e4bbc660e324a4ce6d86517e4a5c8b22dcea296b6d4b1dbacd4c984","ssdeep":"24576:2qcTs1zrW/mOcMd4hRGhuBgcuSros12vsG/5IHjdOx:2qcTs1zrW/mNMd4hRG1aos12EU5IHjdi","tlshash":"49250ad8b291b03543a765f5007f050bf33a6919740e85a8f269e8da7c7d44ea27bf38","first_seen":"2026-02-24T15:49:18.972303Z","last_seen":"2026-03-02T23:08:53.766035Z","times_seen":12,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"saltuspro.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}