{"report_id":"d77dc654-4070-438a-8884-e05bbbb41c0e","version":6,"status":"done","tags":[],"date":"2026-03-02T14:18:03Z","url":{"schema":"http","addr":"axendra.vip","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"title":"AXENDRA","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"axendra.vip","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T14:18:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.axendra.vip","ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-11","domain_rank":0,"first_seen":"2026-03-02T14:18:07.154795Z","last_seen":"2026-03-02T14:18:07.154795Z","alert_count":63,"request_count":63,"received_data":1061868,"sent_data":32202,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"axendra.vip","ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-11","domain_rank":0,"first_seen":"2026-03-02T14:18:07.158616Z","last_seen":"2026-03-02T14:18:07.158616Z","alert_count":32,"request_count":32,"received_data":8371224,"sent_data":13548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-03-02T03:33:29.293513Z","alert_count":0,"request_count":10,"received_data":51207,"sent_data":4795,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":2,"received_data":261164,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"axendra.vip/assets/index-D0SeUzuR.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44dccba7bbad53c59c2d9ef55de406d1","sha1":"827ae70a3ed0347c5f2e17b408429dc03194b164","sha256":"0fc2dd47be430063753e1f27c8510b0bdfd823f9736ba6946a600a57d6e45782","sha512":"a7ae22e84593eb831cf44c369f653fc5b5c34441fe248217d3f419b87cb45a3c2add80822cb7df6b44c61066f4e989305acbe5a0dfea23a7df1ee893ce3b5cf8","ssdeep":"6144:sWwJZejNx4F2f8GpkG22QqHrDqLYiB2sgVrLp77Kyjp3KIp:rwJZejNesf8G3vQqHr9sQLp/Kyh3","tlshash":"a8c4f842f896d9bde7b7a495104e2410724c3fcad04848e6b5fe9e062b97db8371eb34","size":573722,"data":"","first_seen":"2026-03-02T14:00:54.579898Z","last_seen":"2026-03-09T15:15:57.935134Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/vendor-DVoNlCS0.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1c7c2ec3fa5fdd49c1e99ec9fe79b1f","sha1":"8109fa405467b1ccd766403898d413ac512c65d3","sha256":"3fe8c6d473f1d10a5c0ed389c8ccb10d6504f8f7664921cf37b255bf88fc291f","sha512":"fb17c1194e834e4bc2b086aaa332118ddf3412075a09ec379d6988963a37b4aa3833b8eb1294cd2d539e6c6386ebb487c9f73859431abf461f1564ef753bb7d0","ssdeep":"49152:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URU4HLqsNMUE9LaRoIuU/Zv+ehV9wo8u:n+6XdeSc","tlshash":"25a53bb8b651b07507a720e5007f0907eb39690b704f84a8f669d8e67cbc94ad677f38","size":2239056,"data":"","first_seen":"2025-11-01T17:44:45.863769Z","last_seen":"2026-03-20T19:46:41.819913Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-05T11:24:42.503936Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-29T22:52:22.748082Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6bf3d54da83101c2d0cd0d94a69d3c04","sha1":"d125f3ba021adeb05c5c7dfaf4fc7e74a0e7b3ee","sha256":"2a2418700efee08efa3470a8e6e387ed7f4769f63bb147a00d2ca287af1ea474","sha512":"6d32fa0a1baf76885888126915cbe4a60047748be8833907a4585c6248e25837cce5f38efd8ce543d95735a113922eb8e236f6fa50efde28ea544f9f85ae2fab","ssdeep":"","tlshash":"edc080cdb0d32e183e01692064af3cd4f1344467b14817528c94d85c2d330f54333e9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.962702Z","last_seen":"2026-07-28T18:44:07.266487Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"47540997c6538c57830fb0ce972ce055","sha1":"8565f22fcbcff847c75545c1896ae84d4be4ea73","sha256":"0f80d63f8299c46291ef24637b760be2286a9f13587118e8c3af078cbba1d4a0","sha512":"5ca74a18fbfcd3273b667769d68236eb8eb2996fd1d8d84644584274ba0d6f5d43d6a1d2aabfc806c4e033c363d1493eb12d857d14eb3b4f40ceae3b793b4605","ssdeep":"","tlshash":"a5c08cc8e0d22d101a02b41424ff24e490a8442674481b069c94ec892e230b48233ea8","size":149,"data":"","first_seen":"2025-04-27T11:55:12.998082Z","last_seen":"2026-07-28T19:31:07.685697Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/charting_library/charting_library.min.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-08T09:33:39.973892Z","times_seen":1326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b60a2fe4310f25d7824536b6a1e697b0","sha1":"b1b2f5cdda4a1ddbeb01cfdffa9bef2293b692f4","sha256":"92f8551cc981825b303bebbfa6afd1538f69600db62e9723506926b5636027bd","sha512":"5486ea1d943b63594e8c994649e10b25a67945ef222ed768c2a523c2abd5e6f2194f017a8f9119a0da2b9cda115a7a8547c16b1bdbc4d7ebfed2c766114d4baa","ssdeep":"","tlshash":"48c08cc4b0c22d242606682014bfb4e49024402770885b028c98e84c2e220b09233fa8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.958543Z","last_seen":"2026-08-06T14:43:46.19906Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-07-28T18:44:07.251621Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc094b1b256d5c643caee7dbb2759bd0","sha1":"adf30061bd73776882c9b3c4307b9da89a77e448","sha256":"1924a94a5275e97ac50fd4b9ceb9cd137670a857a159826847a1bf70e4aee577","sha512":"7a645e4da9bc62cd103bc2b66fdb43d40826816fa26b64e459fa8889e42b5a9a1b67ef8218e9cb6cd999a1b9121cb41b3d8baedb76d9b45e861e40d72279ad1d","ssdeep":"","tlshash":"4dc08cc9f1e73e1026566a1514af68e8a0344836b0891b8f9de4ecc83e630f08237edd","size":162,"data":"","first_seen":"2025-10-12T16:34:39.965367Z","last_seen":"2026-07-28T18:44:07.269877Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-08-07T13:50:38.02062Z","times_seen":900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-08T09:33:40.047504Z","times_seen":4433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-07-30T19:44:59.57164Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-07-28T19:41:49.889778Z","times_seen":1138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4342c075064069a75b21b06ec6c9c3df","sha1":"6d219c2b352a6e62d76bdceffcbe70cfe0b9ef66","sha256":"51d786f481e0b83ee1dc319b53342d36b4b4f8fbeda9e872f89e25ab0e41a380","sha512":"cc78154423bd3125ca7754f934cde50e37e904ab59ed3aad3e349c5be9447a95a5dbc5c39eaf5d3c2b8df659c2b29555ef731de13df95c7e4351f0fe084ca604","ssdeep":"","tlshash":"f7e0c089f4c43b50ac052429766e38e89030001a6ae85b6ad9fc88887b110f84633ef8","size":353,"data":"","first_seen":"2025-10-12T16:34:39.979026Z","last_seen":"2026-07-28T18:44:07.267302Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99362d42c48c3ce8a91d0ef845a6d291","sha1":"7255a4d130d514351caf81f67fb4d9cc0d83c62b","sha256":"be94163fb61fb00bbe6983f50081c480207345b8954f9ee50fb2c1c2ae3e6073","sha512":"00d898d537893ec342ca42ae6de18ace2f732233bdcc9ebec86dadc655f76c242e445b9f21e0e764a91e23051842285042be74f3b088e36c08f664b359be5ff6","ssdeep":"","tlshash":"f4c08cc4a0cb7e145742691052bf29e4a0344027744cab038cd4d8482e274b4a23beec","size":154,"data":"","first_seen":"2025-10-12T16:34:39.92349Z","last_seen":"2026-07-28T18:44:07.271401Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-08T09:33:40.065305Z","times_seen":7188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-08T09:33:40.050407Z","times_seen":2155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"74bacb5421c2f8f04338a03d44befc4b","sha1":"389d6724ce1b39d00770efd249a374b38eba7b81","sha256":"b89832c7ab834cf0bb032697b4066c03e1b3e5c56ea79afaf45268381ed425a6","sha512":"29b6a3ad990e67fa83a9bf23e05e08110a4d71e8e6c6dad72de32e58491415c830d897dac2eae7970e5c3d1a273a097fd9d99849429498e9744be6583b620469","ssdeep":"","tlshash":"1cc08cc4a0c62d001a12641014af25e490244026b04c1b128de4d8482e620b08233ea8","size":141,"data":"","first_seen":"2026-02-25T17:49:59.600279Z","last_seen":"2026-06-25T16:56:23.834009Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-08-08T09:33:40.046762Z","times_seen":1653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7342e4e83efdd4685023506df50500a1","sha1":"d4e998baf5423c2212d97dc74cb641afd5acce8e","sha256":"b318b1783e618e649d51f2fd8823043ebd92c8e55930eb55798d63d62661d985","sha512":"47718a51ac2a72020f8504e34d011db4240075d28b43d5f3e360645aa64de90989ef46e947a5114e0b7d0a04001c6fb7a6dd9cc0d779069b9152f5f89f471fb8","ssdeep":"","tlshash":"83d06cf636b655802c85412e0acd2c21b1108233cc9e7a0c788c6c00afaf9181a78436","size":245,"data":"","first_seen":"2026-02-24T16:10:35.333553Z","last_seen":"2026-06-25T16:56:23.838454Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/en-Dbrzt6Vj.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe50af114fc5e587f6c79c2be1e6273f","sha1":"9d02e02462df7ebc01a07cfc310a688e3c5ed53a","sha256":"5c2b59f8a163fabe36341e65215793395c096e4fe4dc18b4591707bb319d7659","sha512":"da633e18c213c8ac5ca71a40ad8948ad74b4fbc35e13a0f4465ba599c527669154ee5a7c6dbbe643c44a188e8e8ac6afe6ed8afd6448c1643ca118059dd6073c","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJou4/HiA9JYOuy:5poTZOozUgJzsYOHnxahJ3uy","tlshash":"7f43f88dbe165c9a04e3237a78ce6a6120f505c1c358881f5fec85fc83e1b6767a7629","size":55269,"data":"","first_seen":"2026-02-24T16:10:35.270307Z","last_seen":"2026-03-20T19:46:41.750165Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-07-28T18:44:07.277008Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-07-29T22:52:22.754408Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b9feffaf88a276be701798d25ec91767","sha1":"67d6f5c6a65090927fe5143dbf6f92f6123e2924","sha256":"2bc6d1c977ab4af73256c49f1a8bb00cf566dba43825851666ac68f608c0bd25","sha512":"156a0089916390ebfc44b5681c9c35ddc19f575c0632264ba3e709f2a88b2b41cfccd8ca8d5e66bd11858cebdcc365bcc17c588577b9e316c83c024965ddf33f","ssdeep":"","tlshash":"c8c08cc4a0c22e001a02a82128af28e8a024806774881b228cd4d8592e620b08233ea8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.997265Z","last_seen":"2026-07-28T18:44:07.251024Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7d484391ae36f9672dd3a7e7d7be9763","sha1":"d53f53a7b8fd10a4966a66bf4850e275378a555e","sha256":"ceb3142d25d807ee8b06dfc21328ad2535124a2da646d83f8460e529f9ce6f47","sha512":"24b179dc9998205322e8c96e434a14e5e610c4faf8a4b78a3a415d067d26b327a94be7ac5f4dd2c2f52999d4693664b17625d2bf65655ad07665e3a8c1f4ed0a","ssdeep":"","tlshash":"6ac08cc4a0c32d402606641011bf34e49028842674481b429d94d8482e620b48233e9c","size":148,"data":"","first_seen":"2025-04-27T11:55:12.952615Z","last_seen":"2026-07-28T18:44:07.26193Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-08T09:33:40.045943Z","times_seen":1697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-08T09:33:40.051145Z","times_seen":1808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-08T09:27:02.565603Z","times_seen":8166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-08-07T16:49:46.067625Z","times_seen":1148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-07-28T18:44:07.260897Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0381290b89e9198fc37d2e50b5f37797","sha1":"1508e92e22fcce03f5d3750ebdfa5abefe1b4e7e","sha256":"44841ff32b4f70eed44572ac672c77bd9cb91e417284049c17468f9e228122dd","sha512":"eb0e7d0c8ccca235d9f892dc29b843dc17ce5ab411959bd84620db36ca384f98e36acd31e3658904cf86c7c20d2fa0c7efcae2a1b2a68139d47df061f3f62003","ssdeep":"","tlshash":"38c022c6b1c63d804182711010bf24d090389122b0489b438cced8082b630b28137f98","size":192,"data":"","first_seen":"2025-10-12T16:34:39.937079Z","last_seen":"2026-07-28T18:44:07.264887Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fe0c624c7d2df90286e0b5ceae258a3","sha1":"14d5f785a420b46a5f0943c3ecdb3b746d1d6468","sha256":"83ed0fb928d8883c04ae76be79edb782fc44ab2db0bc8096d6e447f4590867db","sha512":"a3c605aab19aebb6df000db075b74c211a92844e83fd3b85952951f441c14c648ec48e81ad1a07c9cc3194ea9cada33a90a7efd50702f183682a2e3e6e13e713","ssdeep":"","tlshash":"bd11abfe291ab02a6303405f976b79117421a0a9000a584177cc9e9dab9abadd0cfb8d","size":1054,"data":"","first_seen":"2026-03-02T14:00:54.654967Z","last_seen":"2026-03-09T15:15:58.030433Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a6dcd4a293ca369ec22e3f632d87d77","sha1":"f1ceff18918a70369adbfac3c38de492f0970d31","sha256":"74b9b080545da650705afb7bb7c83deea7d8dba4f544194b01121ffc59ae1cd5","sha512":"c1fe1c83c092b6c8abc122a6503bde6642cfdceb2ff0bd4ec7229ad0f16a48eecb5f5a40445f1a9d67d980176f4d2593a2135412d81f3afd476ee6551706cf62","ssdeep":"","tlshash":"79c08cc4a0d22d101616691010af24e49024442670481b028ca4dc482e228f09233ed8","size":139,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-08-08T04:30:17.959672Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-07-28T18:44:07.264037Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4acf87d00c4897d30dc5cb9aeadd7c45","sha1":"dcf23a6536e55481fa1bac3bd3fd146a91e65184","sha256":"56727def1b270126ba40c9ffb947309084fc4a22d6caafd6f785307e9614ad82","sha512":"842f100296530229b32e93ef969aabe0745435f435f79bc069fbf45f5fd47526d2d8e7d2ffb09957fefdfd831d27a0d1c5814ae7ff0e5177f8813ca941bfe17a","ssdeep":"","tlshash":"5dc012d9b1832d1016166410957fa4d8912844767188ab92ded8e8583d534b45137f9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.945429Z","last_seen":"2026-07-28T18:44:07.260102Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"56ed1dc7a7c7c4d0135776e306ae9bcb","sha1":"18d8914c8d7a21ea2f664080fcbcaf0c942c3ac1","sha256":"055cb83a18d103da0b9e79549d4ca0aaa5b2c7445ede7bf18317c53d8d18570e","sha512":"3f4c3d523962372f297e9aab82917e8d07f1b8f69c4a1fa2ee8e3721d73001e60707bc6de4111ca20196ffefd97f3df6b2f07211b3841f397635d05b9cd4e2e9","ssdeep":"","tlshash":"b7c012d8b0c66d002616a41028af28e8a0288026b44c1b968da4ec592a620f48227ead","size":170,"data":"","first_seen":"2025-10-12T16:34:39.92057Z","last_seen":"2026-07-28T18:44:07.254512Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-08T13:13:16.342637Z","times_seen":41220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-08T11:53:25.206916Z","times_seen":42698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-08T05:00:07.323168Z","times_seen":4481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"98cb1f471a0de238da72628a4c39dea5","sha1":"de6c28f3b2e2ee6f1b47b45d014bff6a887bcd08","sha256":"b1e75cfc14734b3cb73043c2d0b3e1f10dd80af0775ef978ec39a0500f445f26","sha512":"5ea0135c7d00e74a33a6ee8ad3ea92eef10154456aade6904e59c1bafb3b755cf2e0c2d1c3efc83cae6dcf2db7354bb90ca930c1df504fa39eb03c381206c6a9","ssdeep":"","tlshash":"38c08cc5b0c26d40160aa49028ff35e89024442bb0881b428ce8e8983e220b08237e98","size":152,"data":"","first_seen":"2025-10-12T16:34:39.992257Z","last_seen":"2026-07-28T18:44:07.259131Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ec9df9a33b666410337704bd726733b4","sha1":"d198df361486f669307a9f500430af5781ec29ca","sha256":"caca11cea1f1ff1eca68caaf85a0bb4b49f19bfcdc242251086ee515cc3bbc49","sha512":"e86f9ff2e723cba50481674e7514202d0198ac7629d8181b722cddb077afc2c5295c6d28dada4a9fd5d4886bf82ccda806c7aacb64740f31a8c643c411143342","ssdeep":"","tlshash":"a5c08cc4b0c23d006a02641410af38e4a0284027b04c1b129c94d8582e730b08237ee8","size":143,"data":"","first_seen":"2025-10-12T16:34:39.988929Z","last_seen":"2026-07-28T18:44:07.265677Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/#/home","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e4a7e90831c1bdb26e2ce6df106a83d","sha1":"5923251fbec594eeba41afbfac24af5ee0e74d56","sha256":"6fc754e914ddb5d93f11d74413c8e9e0db331bbc04f357c8725c824b496c3db9","sha512":"03ce6da278085fad75e631597676ce71c0e5891687222594a0620581188e4e9b72f649d0262e9bd91c8cbfe1076c492d0b5389df988e74068ff6f79a1abb55b0","ssdeep":"","tlshash":"c7c08cc8b0c36d002602781055af34e99024802bb0489b128cd4fc5d2e230b09233eac","size":146,"data":"","first_seen":"2024-12-18T14:57:20.727033Z","last_seen":"2026-07-28T19:51:45.007857Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getCoinList","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:44.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:47 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6VJmsET3PqPPqxreBkKAdU4%2Fq2IWnTYp%2FrF0I8L%2BPVpanhUO1wsaGl0cLCfOLOb%2FApjrbI%2BmkYNMlvY4fGKnbYi2OM50bkNu%2F8rgmsKjLnTHQ%3D%3D\"}]}\r\ncf-ray: 9d6106d348dce0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24400,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"564372ca6a09dfa8ece3d623d7a93498","sha1":"bfb9bbd07820eb9844649438f87ec4ad64854e12","sha256":"27a197dae44afd96c7a9a5344ec4f1986d6aa011d5c42e4c1b416bdff4606bf6","sha512":"bca097427d5bf995942e7b083fcbc7d10347ce2befb34e8b357fad61982ae3adc8dac4cf33532190e84316fb905176eac51e23beb85354f984015960c9b067b5","ssdeep":"384:FlCN0K2wt4wGwJlQyI7E6ygi4SEJgutZUeKJ5ghdzt7l7RWuS3yqcwFlGdu4vVvZ:Flo0K2wt4wnJlQyIw6ygi4SEJgutZUex","tlshash":"deb25325552c96bec56dd1d12dff7a12908c31afecc58e1ed2de8cc8cad49706606b0b","first_seen":"2026-03-02T14:17:50.710236Z","last_seen":"2026-03-02T14:18:34.611202Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/ai1.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/ai1.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-2d31\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUQNecWIq%2BsbGgib8kkbVDgEwQ8KHE54tRzhSnjINQmY4Zcs05Gly3jndsbLwdJw9es1RhL%2B75II5HCqjccPDqeGFz9%2FD5g%2Bm5Ov\"}]}\r\ncf-ray: 9d6106f1def69a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad7f348370ad25512357d8c7c20b3ac","sha1":"a451230898d83bb5a76762e1f4bdc9deccf49462","sha256":"b6501107cf61530810ec864b8d58f3ec21275ffa0467d01a7a969663588158f3","sha512":"1510f8c8cf0d9c49b23035370f90fc58d88300d3c649ecc29b8454296f967c16e6cc8339eeeaabbd6e6cfb1c9cacf26d48d06b41d1351070bacef700092aeb91","ssdeep":"192:oreDaEOJ8rpKaEJtym9iiSEYrydZm94rUD3o:oreDWJ8rpKRxDS4YE","tlshash":"4132742ab3aaed7af140d3e8ca42c035215556e37641d1a1c6e06f6fd8201cd1a7fdcb","first_seen":"2024-10-31T21:21:10.384677Z","last_seen":"2026-07-28T18:44:07.228468Z","times_seen":173,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9Nd0eO5%2FP0spKDYMv0Wt2tv5sYaa68P3SmbrPY3VIjcKKDNojJFP4D%2BtrN11Q1SbxNU8XVVfDJk1gsgONBnMdgmajjXH%2Bc5jy%2FZsiZ%2B0NSqVg%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f99a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42391,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a8c3e12c5de3e14b2591b62e35deed95","sha1":"acb7c7da15b9be249e3e34fd8dd25b888ab1cd79","sha256":"3ecfc6579f32124b0eaaa8c67e3211952cdea76a16788f7155bae5312377d9bb","sha512":"b3c32c24a351ca6ec7b6c98f8d3fd59eb5f9bd47f6e9d38103db0f6dc153d3b54703b18b60d31adad13a0d07359b7d0b3e8f2956aed9e5cbceb2f1949876020d","ssdeep":"768:wFgIT/j7hdJgMqGZlnkNqLdeB05LwFZRgFd:ufJcNqxeQLwFZRgFd","tlshash":"f61302f07bc8c19ae93ecea74bc3acf0855677c306cd899661ef4711aa94233d544b92","first_seen":"2026-03-02T14:18:34.613047Z","last_seen":"2026-03-02T14:18:34.613047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3480,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 72\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":72,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lever\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSS8ZkzzUwQLcBiQJciCBgf%2FlMQk%2FRlv45BrH2Lek9BJRNZtqoDmNkNaqPS291vF06CJPhGdJD5i1OzU%2FAnHUwJJ0hqsQEf6hLtkNAmgfFGXpQ%3D%3D\"}]}\r\ncf-ray: 9d6106fde9fd9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41475,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d7826cd69f978a2fedaf3b798123d99b","sha1":"9c82d610982f2d71ba60ff35bd26b8a42cf48fae","sha256":"ddfb6a822b4028b6d061b6b723b44cb5bf4a4d80640849061b9b52eaea395988","sha512":"344c6e49c29e0a3a03e3ca35b99b60d5ab889ac5916092942716c5f3c137b83113b6b6be29e5f0b798de370535994c9a03977da9073a10dfd4b01f22bf37788b","ssdeep":"768:NcW+9HS9mS6u1XMhX5PoOSGfA/Sa1q8pFXv65J/g54OXergy6K5jyszmq5eCSW5P:eW+9HS9mS6u18hX5PoOSGfA/Sa1q8pF2","tlshash":"6f1320f658bab086dd3c6c811fe37eb65d773a89cadd886c328900596953334c8c27b5","first_seen":"2025-10-12T16:34:39.857092Z","last_seen":"2026-06-25T16:55:39.179477Z","times_seen":79,"resource_available":false,"data":null}},"time_used":3476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/notice/getAllNoticeList","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4R9k1IKFUk4xmA8RjkiaZH8Ow5pwknze4iDI5XewllLI9Qftp%2BbNnfsU22aXEVvyG%2Bm6DlqzRZUiEnVRc06R61LeHkwfozYLIKMLUOhtJVpBKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f2e9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T14:17:37.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p50sGhQFBGpnDSRWb55LC5ExrqQdCS1X7jNlRJ4JcV%2FvP4Z%2BZ6m3Zdi%2BH%2F4wcJyvyUjMHaVwosg3G2w8WG7iNJ4ttYtojOSaayte\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d6106a9786b4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"0113a77b6beebc680ac3908a551fed07","sha1":"367c3fdeca718ea692ff66cbd5211eac161e4869","sha256":"473496e933874a6dd830579ffc6cde4cdd9df34dcbf953c03fdf0ba29e72b2a0","sha512":"cd6a1a346513b0c1257ae2b4355eebb2d39ae46210f8c9f58b5b00d6bc63b90cfb00060335c5a35721b1d88e3de68c19620db1c423b4f5f620a67aa8d388fe96","ssdeep":"192:TFlbhmUqHUqRGMRrdiWK1FiUm9Al6ZI31ZCxfv2nftZbKuB1Xiaidfo:HUtU0pmFZCx327SpdA","tlshash":"5602a7776cb0985a63634226abdbb5146e308247850d8ce4badd18eecfc1fd5c8d7760","first_seen":"2026-03-02T14:00:54.623441Z","last_seen":"2026-03-09T15:15:57.934455Z","times_seen":13,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":49,"dns":15,"connect":8,"send":0,"wait":420,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/ai4.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/ai4.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-fde\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ETHiULJumRd393P47NkJsMcICLNskzWue6eSj5%2FkNNz%2Bgdl%2BZ%2FcmuwgYOBg6iXUDcXJUYJs%2F7myXtYi01lHBM8oamlGtJmpTmqPH\"}]}\r\ncf-ray: 9d6106f1eefc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f36289a67c02534f334b7a7ba82586a","sha1":"ea680334caae72af8027d42c36702e6bb6929f64","sha256":"0b143b746b8b6034e6dcb73cc78fe60cf59e42a9cba1a6cf605045a9c2e5bbde","sha512":"82bb649678fcb6313c60455f6cd283a1ae047d0f8ba4a0508cff06081b2c231702ddc603c823ebd3ce17eb4cd12b8df28d346c8a04faccddf905b79979f61aa3","ssdeep":"","tlshash":"8d81b62ab3b9e976f104e7b8d6059830355a48bbb5814250c3f5af2f91241cd1b3f8eb","first_seen":"2024-12-07T19:52:26.441151Z","last_seen":"2026-07-28T18:44:07.219997Z","times_seen":148,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/cooperative.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/cooperative.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-13b4d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9a8%2B9wg6EeJSUynHoZAc7R3g3lPAxeX6fdxKTGjgBU6jiz3HlnvbfIYoYD9CyqJZ0z%2FR0LpuNNIplb16HYPszdy5cBsg5%2FT9BTVn\"}]}\r\ncf-ray: 9d6106f1ef009a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"290c86d36f158d49c3204227be9accd8","sha1":"447efd04768b92065766196f81da6c4b6876773c","sha256":"d9a2b25941f62153280d62d6605f788cbbf8c5630c212f5fc1c04d86af7005f3","sha512":"6a2f9ff25a25902e91b99f3a8c5871f5e82d755c3366062ad5ccdb86e3926208a32c536d73765111f5192c8d35ebae60499a00450fb3b787f2bf52cf6aeb7ff3","ssdeep":"1536:t7Ad+P9FV8MahIfiDJInr3Ya7Z1uMslhso/F:t7P9Fx2d9Ir3YsZIMjcF","tlshash":"cc73027ff819cc0bd6018a4ce88dae066c18be195211ca3f7648794386589ebd63d1bf","first_seen":"2026-02-24T16:10:35.271118Z","last_seen":"2026-06-25T16:56:23.810118Z","times_seen":65,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":398,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/notice/getAllNoticeList","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8Wn9dsggs5Rdr1cr1NGw9D9N%2Bz7uyfDHEdNIIdR7UfWt1MgKE3Bp5%2B3uz4nhziTjwui51h1uiuu76Y7ozjobJW1DC%2FNHcGGuaOUEIp6J6FTbQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f39a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3fb4b16718907c0a9ba6a76cff3dd250","sha1":"54e64250cbc3865e128dd55b27f441aeaee741df","sha256":"ea028989c4a7f07718d825e8ad68fca7e958057d857269ff4b6b482a92eab967","sha512":"1358521092bcca8a18911c17cc4ad6bb1a2cf938aed04a180f35232681030dcbeca5bb55533526454325a7e70d024751f1a0541a7a534dd88cf8479144ecb205","ssdeep":"","tlshash":"d1219d0f15789eb9180a59c321cc7ccc95ae1787d694cc34976bcf6d82f15ba5b1b608","first_seen":"2025-10-12T16:34:39.89506Z","last_seen":"2026-03-09T15:15:58.00065Z","times_seen":28,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSEqw9UBg9uUkzQQf4XkMt%2F4Eo4brYaAbPc3C4GdJc0fnL%2BXj2DqC7UG2O0eTmSSIInF7HjELFrapmtpZyBaQIT0IyVEWsaJFgn9bDyZL5eOFg%3D%3D\"}]}\r\ncf-ray: 9d6106fdfa029a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38476,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c5b5ba8c649046928641a4caa5cb516b","sha1":"4ada7add3c2a43660775783889c18d8223d519cb","sha256":"d46837ae88217f00f9c7d0215bf68fa53f9cca438f9110b73777324349aec736","sha512":"5ece61ab542ab6697e4f2da93baaf4599b538ea15f53ff56286090834911c3ccbbaa326e6ffde8ac9ec86fe39812245d3aeb2b388bc360da6114d8610c82f04b","ssdeep":"768:UDequUcEX7XPykpQirHVmrbcKwGA1Coqnc8:GXL/yqHVmrbcdGA1Coqnc8","tlshash":"3d0331325ac8c065c9324cc21fd37ee03d2635c7eadd2d727daa1c54bad462af10679a","first_seen":"2026-03-02T14:18:34.618753Z","last_seen":"2026-03-02T14:18:34.618753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3459,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:47.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:47 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9j4gW8FqEd5gIM1tsRYxSm%2BrwtLChWD4qWgvQ1O8er9u%2Fmj7039iezGT9youhlRuQcwLJsF8YcMABjUv7s4%2FyLiP3pWco10kdrSiW93w8HSzEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106e87ced9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/contract.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/contract.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-594\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NzA37p0YMqJUl%2BMqQszVtrXpcWmSS%2FoaptvJjPQZ7cv2rJu1Kx6cEbhNkIggFfsJdMEhEQS9GxE8H5abS3VxR1ZmGR%2F6arBWKke\"}]}\r\ncf-ray: 9d6106ee1e079a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efaacf17d8d90547953a7a9dd61ec2b4","sha1":"e3717b22a97be0eb581782ec087beb5b56ad036c","sha256":"8dc73b270dc5ae9a60c94191834deb88dbe59950f72be72bdda75ea3618facd0","sha512":"5cc2004dd6c6d614dc980531e6591e8f408dfcb0eb6e632da58375088015f761f630743b581225655dccd32464b2311b5513d2a70d43c4b5bd3ee18033d929fc","ssdeep":"","tlshash":"dc2141ebe7d8b5d0e905e780c91592a1b5b931f93b7e4b54ca90af08331c06cc88ec54","first_seen":"2025-09-28T11:01:39.541404Z","last_seen":"2026-06-25T16:56:23.797765Z","times_seen":81,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/fonts/DINOT-Regular.ttf","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://axendra.vip/assets/index-A8xeihCB.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69a5959e-b6ec\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkwS1Q1r82aevXUN8LWQnJf2TxUVP8owpVs79OvgHQsV3b2l03KcICkvae%2FbfUJ73uF1WlIMwqK2%2BVjckmDT0uLtqn2ondpc8Uvw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f22f209a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.521415Z","times_seen":344,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpqnu%2BZHj3jwX9d2uADpKUyOTM%2Fm%2FHM05nR7ame0U1x5pBQw1XplPXLzPKxqi4gl%2BHUk%2B4AyarFaL6zvkcsO%2BlDvTJrJUFaqZJjjdtjiCN0jJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f329a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1795,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/vendor-CGcHcJjv.css","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:38.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /assets/vendor-CGcHcJjv.css HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a595b6-1e27e\"\r\nexpires: Tue, 03 Mar 2026 02:17:38 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1N7CihIY5Bhtv6vOxxKbbNWS4hv9bsVvieicKTg9qWSlyuRu75ZWf0w%2FgWlwdyS9qUm%2BYeKs%2BIW%2FL3zkki0rg%2FA7V64pkUf%2BPh7W\"}]}\r\ncf-ray: 9d6106ad7f859a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123518,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"feacc9695c0732ee31fcb6e268741bd2","sha1":"97e89b2991314e67eb4ba4962f44019954cb7511","sha256":"0081b07e43a5742a0e4051cbca6450d88bf212c4e3423c8765f307b3953af9ba","sha512":"e3da2102d176b9c3c58c4de159f92fcac15deb55b265ba8ad2edd08ac31246f66e80b5ee9047e4f0087bd5e437c148646d27044841faa5d4239f773af452ca25","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8Dbf8IG1Ah5aIzW:BnNIClDsIxuVS8f9tQ","tlshash":"1ac3e5a5e6c491fc6f2bf2649b8766d8f23cf661dd01daa4f105515c0ec7bf10223a2a","first_seen":"2025-11-01T17:44:45.747081Z","last_seen":"2026-03-20T19:46:41.787073Z","times_seen":53,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:47.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cqu87s05eoo6Q9ma%2BgeVbzr3vqGnf3oTFD2319mMVNPwRshbHmkGPbCI25lbkm0pXWcO%2FrIJms9qXmLTr5jB4Q6xKhT6XbfWRzQDDW0D0QonLA%3D%3D\"}]}\r\ncf-ray: 9d6106e9ed2a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d9cc2945707c38cc0dc5f3518585755f","sha1":"d7103db359af77812f0bb09568ecbf15005a779a","sha256":"c31e306e12d8164e81db5f6a51e444ee78f38bb976b268166db6705cafb9d670","sha512":"efd2306992d343602451bd8f577e984a9e7632fe1bb5db8293ccf52578ea87a09b98adaab0d70f4429af1901c9588800db3ad3cb37b561ec8ac27be6c5eb92aa","ssdeep":"","tlshash":"1fa02200ac0880822003008a0233020000f0208c2a002a08fe8ef3b0c00023a3083888","first_seen":"2026-03-02T14:18:34.621562Z","last_seen":"2026-03-02T14:18:34.621562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6j5CtatoPrpAwRCf01Fvb16s7TtI9yXwN4PtaolSUVrk5tTnQv6vtBr2gN9OjzzH%2FNL33hm4wkDbNcg2SGJtvexm2E9172pnqzeA75yErBEZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f309a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1802,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFWX3zHqWWcRZDx72g4V14Uv8iOMSotguhCa0btA7A9pbUCnTdkDWcsGnHDrIXh%2FZV%2BY0z4EnXLZdz9gUgrTBu10Szldf3juHMiQ7PHv2Hffxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f3d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAvNUlM5s%2FcSSgIuBGzGNN7YZLk%2FLPFgevcIJV90VwJVG33JmXu6y6xI50fBOfo3KZPhmlCjKjn1po935syv8tq5PcgPfhGRhXjtJ%2B2I%2F1PvKA%3D%3D\"}]}\r\ncf-ray: 9d6106fe4a189a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36616,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cbbf643fb55c4b0689f8a0dddde3be8c","sha1":"8c8a6cee6dd8c78ce02ab2a7d7d51fa3b47aa4b0","sha256":"4bc07fe0b10e1e34e7bd28eaf6410ab7976a7a1c6c498b1b9fc499858ddc16b5","sha512":"a538baae00db53568edd4573aa1c44ebcf4bb70caf30d220c1d4c8b072decb936ff9eaa38aa0f7381270aad751c7a13021face304d34d8a07af0c204a5fc19d4","ssdeep":"768:4ts9Ww8ArIHJgUeghAsWcd8tKhZcjnDZNTGLLE+1R+hkQyKFurHetK8cQZAOh8f9:2w8A0HXQOE+1Q8HmGOO7HVD7HOHDJJJs","tlshash":"6bf2c238ca8ad389c434adca4f93fce01d063bc30aed4e5595af69212997f67d705782","first_seen":"2026-03-02T14:18:34.622815Z","last_seen":"2026-03-02T14:18:34.622815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3465,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/fonts/Arial.ttf","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:39.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://axendra.vip/assets/index-A8xeihCB.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:39 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69a5959e-ff9e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlEl2uG9cnEqfIaNxOFsWnr6BoRZHdF%2BstuJghOSdDhYKoNimiLmdLN3r%2FPFPkx9WJB2yoZzT3aTc%2BI5f%2F6Ob%2BtFbNz%2BhPVWnVN8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106b4b9029a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-08-08T09:33:39.97761Z","times_seen":2203,"resource_available":false,"data":null}},"time_used":1447,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":1228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/ai2.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/ai2.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-8462\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbiEeS9eFwKXCKKFpVxPPcsHQbJIhu33va7Wg9WZOmQlWqihHCadQpGAmIBKxSqy5wN%2F00CPALm58TFp%2BqOO7KLw2cBDN1mzJU9l\"}]}\r\ncf-ray: 9d6106f1defa9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33890,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b527cb50c44f791e4c1bdb582c296","sha1":"b9d5e0c2a1aad9aa06872c84bd6c1ed50328bca1","sha256":"be31898c9ef6b0f26bbd66f381e89c250d44dcd5e7fe879ac913c3cbd9fe5bd4","sha512":"3c9087d90c856f7440339fa714c342e2583abe629991c6da2e1a8722b8ebb81e41f1fab72f693c069f7eed9566efb88061b35ae3da59b0d44bf5389471f46a6f","ssdeep":"768:b+F76xoi6BmlUAOAzlshwrePeuvj3ubsaKkmZD:b8PRAzlshwqP/3ubsa3kD","tlshash":"95e2f1aeef52980be9560ff9823761f113fb0bb604970c26967067c394d83b8355b49d","first_seen":"2024-10-31T21:21:10.414612Z","last_seen":"2026-07-28T18:44:07.229518Z","times_seen":174,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlxhDyYeJezTgg4C8%2BbZwqnqB1FWq5cPnFC1JWvIvfmbp0RH0X4yCvogiU%2F%2Fz2Iu%2BP3IuHb2CsHBDRJUhJb3JaDLAzR7bjK9WpInxvOBYONruw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f28f549a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lrc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGIXAuh7erCR5XbTK1p47C10DsxhfPzUNJPYfWiI%2B9vuaxE7N8QA1vWQaaNAYhVWC0ae3grTRGT%2BAGbKGnN82dirNV1Ocvy%2BXc7piIMQsKcatQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f59a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37382,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e8b44573877b06142067c00a5e80484c","sha1":"004b622bc1c76c57f0fd25c85467c0c70c076e91","sha256":"191028fe01a1af402eea43ad5b5ca288b04bcc3fb464dbf1b00f2584b620345b","sha512":"ecc3d9563022ebd7542c8ce64800c2c46ccfc2936170d1762e3586f1699c7dd7b420e5b6cdea521cd3fbd5ac69546f4ad211d350eaf01501c31e964f8321c0f8","ssdeep":"96:pAAgMpuhc0uQsue1lhBNCm51TB6YwRCE7pYd1m6/AurngvF1nC3VhAlvJr5DeOfl:XVdQqhBTHjwRC1mhTO3vYBfE5vT3/g","tlshash":"f8f2bc3a7f689244c53ccd866ff7bea146d279c34acc89c250ae4c187e50e62ddc53a6","first_seen":"2026-03-02T14:18:34.625544Z","last_seen":"2026-03-02T14:18:34.625544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3469,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEJiZTV7o8vyWzICkX8KWbB60chTWU7cc%2FVhtPacskAjZgViTeoBvM2TAdVv5lgfU91p0T%2Fx3ujXnEgQafWJ%2FNUAXTOEAVOrzAN9vAGjGEUt6g%3D%3D\"}]}\r\ncf-ray: 9d6106fe4a169a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34878,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"73ca4c78888bd2215f3002bd1650901c","sha1":"667816c754bae69d65f1a7713121b7a5e3f50bca","sha256":"e61a2c80863031b1ec723d30369bd24ab91a14a147c19d0549950f2587ffbed4","sha512":"dc76d7ecce76d4ec451b96a51ffebcd09d8181416b20f4f2a658e45b85b58c80b1d36f20b57ac5d426266faec95327e883841f7ad16917d2d9ad68f3e1360624","ssdeep":"192:Cb/tToP9aMalJvg8sIdZxey/SAFtFqjoDL:CjWaMivg8dPhNqjon","tlshash":"27f228345b889309d9305caa5f937f90851a3ac74acfddc103ae5c4cfe59366f2a43a6","first_seen":"2026-03-02T14:17:50.720603Z","last_seen":"2026-03-02T14:18:34.626715Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/c3814e70d39e45f49ea590f4c4e37d3c.png?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/c3814e70d39e45f49ea590f4c4e37d3c.png?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzyQ-D-p3U2aoMq0BUZSS_YmF5HvGUa29i9eMpfNobPJ-RvV0VPCkN9vpMGAp1u7spW\r\nx-goog-generation: 1745020290975795\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1936\r\nx-goog-hash: crc32c=aCP/tA==, md5=gGHrhAihO0V2VKsTlTGY+w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1936\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:51:31 GMT\r\netag: \"8061eb8408a13b457654ab13953198fb\"\r\ncontent-type: image/png\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"8061eb8408a13b457654ab13953198fb","sha1":"b3c6ec63544ec3bfdce48b8595c1d0776b9a373c","sha256":"24694648b0f76973506d291e2206c941e5d55be5ea85ed6c11fc408a0d518894","sha512":"ee8c844a1d8ac78116b89df7ea1e2880e8425f7c5ff8ebbc59dc0bbb1aa963d2c49a8db92337c3709bc1c412606d88c5a3f3c5005d5c6c05b7e002aaea4f3a29","ssdeep":"","tlshash":"f2412c4b12016e699ab1060d5ae1134c54fec8b4d496ac907d30ff98eb87f588ec934a","first_seen":"2024-12-03T23:58:43.639463Z","last_seen":"2026-07-23T14:02:31.863126Z","times_seen":111,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":139,"dns":54,"connect":21,"send":0,"wait":21,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/type/defi_activity_type","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMvVY7qe8STeJyKPa%2FQcrbsjpF6%2BtD%2BjTLp%2BF9LvHne08Tri1AQOghZDzYah0zoUYONKW82xrac6a%2B67NR5N1OFyfYp7lWs6HUs3Ap6ib7Y5Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f319a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1808,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2391aPkCGP5rrFf4iCvqtjP6v8GTWPHHyC7u1vznk6eQkbFwKegv8axZpbOEexLGFx22FYGUGrTaw8JtwhoKlhIORDPlIB1Mh7GYqn5JCFBtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f419a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"tlm\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHqA%2BF1VdV9ek2H5rmPoRIg2HThLDS1Adu5G89MJ0njdtzk6IK0%2B0SvWyB%2BNqFeCzY%2B6b1bd32wPmhkX2A3an3WeoJsjKYKE46MmPLjk%2BtGT0A%3D%3D\"}]}\r\ncf-ray: 9d6106fdfa039a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42825,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a58efdb55cd64e2d12e500f2810af539","sha1":"532db4fcafe10fbfc6d80a30ce1af74cebc912ae","sha256":"a131b4b3181c2c607f120265158c80c06808e4fe1ba67e5c996ffa26da4d21ee","sha512":"4fd7a773d78cdee373d6bce6c5c2fe329ef3ecf46dd0ecf482c7225d78994dbbcc46d15b6d51f27ce26bcb4d662d2d8c3a31c6d8279d714d2d60bd59dc78ccce","ssdeep":"768:lUZe+dgdnLSUAOQ+YW0JxYb/bhdWp66F7SSr:UVdgMUAOQhWmp66F7SSr","tlshash":"a3133ef44a8882daf531bc8a6ff3bea0071735d30add98c114ab9c547a453d1a19d3af","first_seen":"2026-03-02T14:18:04.417499Z","last_seen":"2026-03-02T14:18:34.628889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.axendra.vip/ws/be7d878b-1ffd-420a-8213-dc597a7f482c","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /ws/be7d878b-1ffd-420a-8213-dc597a7f482c HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://axendra.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6OCTR1EF7ReeHQ3Fgh7OhQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 02 Mar 2026 14:17:44 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://axendra.vip\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QFQRwGKgndf7hUduNOgdRbGNOKk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SKY%2BbCPtn7VVYenViDZqKDrjwp%2FIKvVOuuGlQEZsMmAtMK3%2BbolggwR1kpjSMMDHqXP8dsu1DzFhEO7CfVDvjD8T26Zn26xKYNJLCYU9aBmIdNWzRW2Lu1l5qh727OUPoa%2FEe34%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d6106c099fedbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7844\u0026min_rtt=7815\u0026rtt_var=1693\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3111\u0026recv_bytes=1194\u0026delivery_rate=549317\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=8825c35abaeb7965\u0026ts=3005\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":3108,"timings":{"blocked":0,"dns":42,"connect":50,"send":0,"wait":2992,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/chat.png","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/chat.png HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-279a\"\r\nexpires: Wed, 01 Apr 2026 14:17:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tivPbH0OYwAF8Iex%2BLVvMx3uUS4%2FTNqi4tSKiDlfEFIZFk0IECLpUfTNKLyS%2BdAwXpoxVZkSrpGG4huGJM214SzsVhfNe8ZlcIAg\"}]}\r\ncf-ray: 9d6106f1eefe9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 391 x 391, 8-bit/color RGBA, non-interlaced","md5":"c0b8583d102ab70eb5a9cd4e1ac47c2b","sha1":"ecc2a351a680d2c01b7070b167755e1d9c088de6","sha256":"33123e4b44608f7db2cfc5dc0e6d0fcf0cb06c5e8ac056a637e43dc79a55c407","sha512":"633def91d6eea6f4d338b49bc2d0540eadeb278b6510c824d8e2edd6a0d0bc6f205639cabb5db6bed89d6f7bf1fea63a51f8d877cc0592528b288a6e37210207","ssdeep":"192:LEJaISqTHLkndsrQKyeSZD1sOikJbazA0PkQJprNKIOqJPj9TDiXVLJxkK5DX:LIaI7HwndscKy3bziObazAWkQJPKU1DM","tlshash":"b522bfcd558e4520a9e9203191c6631adf38e9ac7a5bf6a1fc31c4c553a2ce2e74b618","first_seen":"2025-10-12T16:34:39.749254Z","last_seen":"2026-07-28T18:44:07.238802Z","times_seen":85,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-ray: 9d6106f23ba35ebd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 248089\r\nexpires: Sat, 20 Feb 2027 14:17:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XG59dxiOKPLWxprbqTuTXGzAo5qLqcGxO7fZrXkZQAZNdRuITzf8M%2FG8SxLLdt97uU22kRfCNn7oFBHPZeUiZoRnzlQ1Xgijup7ay0eEOATJQ%2BNl6HwKz2R4fRrGerp5vCCCuLRA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T13:43:29.96938Z","times_seen":49807,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLIssvLYNIUfN2c885R8meSS%2BqmjLWFO7Ak27T%2FU%2Fm%2Fcr%2BKQ2fOiqstLkc0dceaGuyWZqQkYAwS2kBszTOqkLnBWZvb7G8I4KMuJXEr9hRkVhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f4b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHkjSxWWcQoBc%2B7AFeXGvzHb5%2B8NUs4nGPjq9UO%2Bt1e6ySmHZLSw0DX1hBhHqY2lc3lamPSKeZt0mvywHtoNm3X3NJzogloWlh3pBBPKd1ppAA%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f19a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37922,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8840f6810ca3ffaceef27a6ba23753a1","sha1":"1c668daa05a4a8c3889e742b1b6ce83a18778476","sha256":"ff3a3afa345d408bee8597b4d6b522a3fbf2fd6ac844314229b9a080ec00116f","sha512":"82dae9808c76ba97542a4ff32a2d4b631626eb6d5bfb9ad6e5b7b83d703bd4e6c05e4000bab8d951bc7a611956339db3e77fdb2b25175348ffb0d990c108c873","ssdeep":"768:kGMzllezoXESODUB9Pg01QxVuZEcNCQk2Y5F+Yw:XMjezoPOE9I01QxVuZtCQ05F+Yw","tlshash":"35039e71bac9d119d838ce820bc3bdbc49063bc34bde9df145af94d26951e22d356b82","first_seen":"2026-03-02T14:18:34.631322Z","last_seen":"2026-03-02T14:18:34.631322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3486,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":3482,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj1xmaXWzK67TpfqgvCTC9V1e5gekNdiSQ0YXofU8sDW7MS5hTAaJup2f395KJAKA3opxcH%2FfBOZsAKfZ13TmvgfU8XNz7QhZtj9goo0%2FQYKEg%3D%3D\"}]}\r\ncf-ray: 9d6106fe1a0a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44979,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"69777f53ce98d85b1b74c7bf48469961","sha1":"c305012ae9f0a3f9feb3a45d0178d9023aac335f","sha256":"6eebbd7acd53a6f63c9b2117d6629f4a8e982684df61e3da920d042c2f9f39e6","sha512":"4dad370a3628e97103be77749ed1e6195f180597bebfb0d787544d33d172a1924f634d744c77b90081e16536ed1a68501c39ecedd6c47de57483912c7015eec5","ssdeep":"768:mKfoEe72pACGTvEYN+BgG4BZ/iw7HDdtTu9EZl14lb8tdaLLnh:7fot723GvpwBun6wXbYuloedaLLnh","tlshash":"9f13ddf59eaa9178c438acc62fc7fce09e1733c346dfad9146ab50062a58336e155783","first_seen":"2026-03-02T14:18:34.645455Z","last_seen":"2026-03-02T14:18:34.645455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3502,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"link\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j66YN29NQPXr%2Bk9ebCMw%2FMFq5k8%2FxxLvKinCfyzqayckZiLDtC%2BKXh22zE0w9hG8TNP%2FeD8IQpC%2F4RcwCBBQr0%2Bl83hag%2Fpf2wk5f6UXRPYy4g%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f69a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34087,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"24c2a4cf49eb7692e96738cdad18e1d9","sha1":"be9d278c1ef674ef34f7cef369d35557b6662219","sha256":"e88676f261bbac9d15e863e9aab8848d5891cd3b0eabef8865efe806416cc01c","sha512":"bcd31e694a60bf510c748ef9a261582ed2616c415653194e8243ec3efbf3cd8100733cae400dcadbcc6674275eebb0dd673d6ff050acdd0874af00324b7d2924","ssdeep":"768:z/xgFozo9l5jiD6wTKMN4e+P/HD9QgXPm1MI7PTQ4LUsh/Frk5Gb4WQKFvKOU7Yz:+FYLUsh/F4KFgtT/NCzcKM+awcXQF/eg","tlshash":"87e230305bcc920ac434adde1fa37ed05a863bcb46ce8dc181de5ac17a5af72e145792","first_seen":"2026-03-02T14:18:34.646764Z","last_seen":"2026-03-02T14:18:34.646764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"eurusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUBkTKxahGk1EXL42wFF%2B5SuDBttUVDNpvU2o0ApmmxpVEZpROVWKWn9Dm%2F1N80dsqxDjhwYFVqqeJ2AWd2HiWiOBQlkgAWGiToliOg2vTE%2B%2FQ%3D%3D\"}]}\r\ncf-ray: 9d6106fe3a149a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43284,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"35af366f5b4ca33b25d1bf1ba36541cd","sha1":"3661070d50c81205c82f445b548dc6498a3fca98","sha256":"f2bdc6a5265246c2ca034203cfff595f08eb4b0bff559918f7f4d82db22badb3","sha512":"b860dbd17a978e150c2fd873b1d8f42b4123dfff6b312f7ae3276aec1b8c4bfabd7bc893c20837e0dd16a0c49dc158e0c178c7c874322bc31a7f8b857db643be","ssdeep":"768:ymiEC7hoThoYK4jMl5FyYCi10Qm0ZHdxPtCTdoSyertVMJe1J52g:Alo2YrjMl5Ft510KFfPtCTySyertVYer","tlshash":"c2137d355fc9c999c5318cc21fc3aee03d26fdc6b6ce6dc241da1c0cfa9466aa945386","first_seen":"2026-03-02T14:18:34.647835Z","last_seen":"2026-03-02T14:18:34.647835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3479,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWy25Dq-13SDmSLOdNOLgq3fh9pH36nhvKTVg9XXLoPwoEKAGJPjYRNmF2c2-momWtfs\r\nx-goog-generation: 1745020353527348\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1265\r\nx-goog-hash: crc32c=gdb0vQ==, md5=6FywUDRdYn4/40KqFOuhxQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1265\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:33 GMT\r\netag: \"e85cb050345d627e3fe342aa14eba1c5\"\r\ncontent-type: image/png\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"e85cb050345d627e3fe342aa14eba1c5","sha1":"966c36a1be038fd0bb9673e455ff3b6188f47453","sha256":"e9a792d1a596130e30d7b945e466f2691a563090f1ef06fe06fec57d7193e0e8","sha512":"3c97550a30076a06c1c785192fae5a5fcdc73aef866a69df4c5c4c891f35add2e58f895c7d671faec539ec3836898283385311e7479c7f4ef9ba7a6dd65893a7","ssdeep":"","tlshash":"0521b717faffd94437722d83839a85aeb07726082e004809345e49c5ec2a8885ceef44","first_seen":"2024-12-03T23:58:43.646323Z","last_seen":"2026-07-23T14:02:31.927087Z","times_seen":123,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djcK3ASBoX4usitvi%2FPijHOiDQ9PCojWq18NjbFqz%2Bt1XqiHM2KbpYWR34AmpXNaxlXDNXDkfhU60IdM94%2FmcNzLaa%2F5Co2aHw2oML%2B6V1CdCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f359a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2TneXSii0vNbtQM0zfmyMs2wiHq81PIcqMHnva4OR%2B9Y8fsslaXPR%2FnCbehSwqUAdCV5PnB4oOuyCxjq4Q5PnpaoSWleqWtmUkfTW9QXN%2BjUQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9fa9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43314,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b2de787201bb91a858a7957cce549d6d","sha1":"40aa640c33a971f89313d6b69ef206699bfd1dd6","sha256":"e4cd0ced7ac773a61645e49272a6a2f3127c14aebb2a4525bd76e3801604c06e","sha512":"bbe81ceeb56608e3f1916e272c48b8a3adf77d5a747af7a00b20621b99b549fbd82d75b652d52061dcd9d3ac04745bed41dd7c48e662bf4695e75d0472f6a377","ssdeep":"768:n70hGSXa+brAtH7jRfQC78SEKCd/7BvDxrLBLSf4wSLCo:8GSXajRfQC7LEKC17BvDJLV84wSLCo","tlshash":"5213d8349a88c0a9c532ccc21fc36ee97d6a31c2a2cd3d077cae59157dd4a69e14e787","first_seen":"2026-03-02T14:18:34.649518Z","last_seen":"2026-03-02T14:18:34.649518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzThYQ6C9mJ3GszMbblKm2b4y1egwqP77w1lJFhCh1SmUwMJzzBN6NBou3f0FASOEgR\r\nx-goog-generation: 1745019091846695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7177\r\nx-goog-hash: crc32c=KbQ4+w==, md5=umkw+KKOd/Vlmi9C6Cp6zQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7177\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:31 GMT\r\netag: \"ba6930f8a28e77f5659a2f42e82a7acd\"\r\ncontent-type: image/jpeg\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"ba6930f8a28e77f5659a2f42e82a7acd","sha1":"a8486aa615dcb5fc601f66289b55a5cdd08cd8d5","sha256":"8bf7252f758e4f74fa910c3f1935501125d6589f26e2e2c8f397b3ae6ec0fe53","sha512":"35ee8e31b81d5474c5f1178161d3f908139b65e1f33bc30db61618cf0d4555bb38d0e7a6ffd06d7562ca41f51ab216b37320bdb29a968c891badff668a924051","ssdeep":"192:BnyBvvQqY4kabfz3lryvlFnkmnXGCvY1JBAQ9:By5JY4kabLZqFkmWCvKBAM","tlshash":"64e1af75df14718adbaf951d0e9e4440d2961a4a5cb2c30ef10c7de2eacf422531e836","first_seen":"2025-04-17T23:40:09.002327Z","last_seen":"2026-04-07T11:52:26.909048Z","times_seen":88,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":145,"dns":112,"connect":22,"send":0,"wait":20,"receive":1,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/ai.webp","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/ai.webp HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9016\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69a5959e-2338\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUdo9QH23%2FQD%2FZH6M%2BbQ6e2WY79yCUZjDNGxfMLP3vp%2Bn8WU3CpXiLPZiTbGogBfhL8Q2ARtKKH8WBZambaILCEFyGawpPH50WjP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f1def39a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ee434d763c325a57dc68dd5cd9342f9","sha1":"db594747347f4901f82ff0d9cb3ce71e95613f78","sha256":"40bd9102ca0e9c26e17694aa71ca21d20bf1f920a73ad03299e21f39eb59383c","sha512":"8a07454d75b9d85f457896ac8bbe209bb45fab6a45b8af5ca1731f443be0938a23f231c9491f76270d08a92e10e8ff453b5de08bbd3196d5c3c8645e5bee169b","ssdeep":"192:FwTdlXOaHnulmseQ++iVAr/wOr9fwO7+v3DeULFnXX0EXlTqKoh5b3:FwTXeaH4++i+X2n3qUJ0+lNoh5","tlshash":"20129e112be96767c912763dd1d05b9bde76fe0ccda8abaa4100895f09172d03d8c1df","first_seen":"2024-10-31T21:21:10.228315Z","last_seen":"2026-07-28T18:44:07.21625Z","times_seen":189,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getAllSetting","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iEaeBsWPZ3aMa1esfOKpXeTFvamp96k%2BHCVy1AfJ0SpBc41xZhpVV42S3jnj9LyuEYlPN0z3QgoDrPKNuanF94UqjFrcrQAnAWmwSreO0g5YNA%3D%3D\"}]}\r\ncf-ray: 9d6106c0fa8ee0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":3000,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":2932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/en-Dbrzt6Vj.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:47.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /assets/en-Dbrzt6Vj.js HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a595b6-d7e7\"\r\nexpires: Tue, 03 Mar 2026 02:17:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1suv2mAm16RWGsgA82QFU6JG3zh%2B0Gv7IPqvMZ9cOsI1tuhqMut%2F4h60WRHkmaSF1xK6yqFqiu8EUGlszLgxHi2JU5bTwdilo%2Fc\"}]}\r\ncf-ray: 9d6106e98d019a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55271,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (54826)","md5":"fe50af114fc5e587f6c79c2be1e6273f","sha1":"9d02e02462df7ebc01a07cfc310a688e3c5ed53a","sha256":"5c2b59f8a163fabe36341e65215793395c096e4fe4dc18b4591707bb319d7659","sha512":"da633e18c213c8ac5ca71a40ad8948ad74b4fbc35e13a0f4465ba599c527669154ee5a7c6dbbe643c44a188e8e8ac6afe6ed8afd6448c1643ca118059dd6073c","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJou4/HiA9JYOuy:5poTZOozUgJzsYOHnxahJ3uy","tlshash":"7f43f88dbe165c9a04e3237a78ce6a6120f505c1c358881f5fec85fc83e1b6767a7629","first_seen":"2026-02-24T16:10:35.270307Z","last_seen":"2026-03-20T19:46:41.750165Z","times_seen":40,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/finance2.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/finance2.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-f73\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71PY0BuwWtqPh3it0vSGvPMGjC0bbSZ4Ucmfbsi6etUa5QpMppmhfa%2FWwi2cPLYtsoUoda2s%2B4%2FhV86GF3nZrDd6YtvQigpI%2BMyH\"}]}\r\ncf-ray: 9d6106ee2e0d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15820c69df508a6f4594abb055110518","sha1":"53c2b28dcfca28a52709d483c588599263a526e1","sha256":"e8ff1bfa91a28bea1b4e9ed5045a365ed42df3536c30d346ca29b736eb3fcce2","sha512":"fcf282fc54d829e562658e8643a296e414e53ae0c70b436255ea1e275accbd40416b1eb73a166221a68d63e5322b69764c0c39f23fe7b1167cf87bd1cea54ce0","ssdeep":"","tlshash":"3181b7f6e3d972f4918beba8c411947175ab34ff7b294b4983c0ded4651606d85ccc84","first_seen":"2025-10-12T16:34:39.812214Z","last_seen":"2026-06-25T16:56:23.808353Z","times_seen":80,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHQLkJiY0rhrAt%2FH%2FpNQ6NpkbPm8sRuojz67Eiah9BIYUcgZ8KX18UK%2Bysogz4%2BOMynVi5lUv2Vi2v346YY12FC3sSkXtnpDiT6O0%2F2B9u1ZmQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f79a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38356,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"352652a4916f3128d1e6333d0c01dbb2","sha1":"69532b5a40cd5298f7023d3997895aaed159db65","sha256":"e0b13099e63b680d16bc26d319df71ae4ff5a771dc204d4a99fa41a4b956b6f8","sha512":"79505ad585941bf3491c92b34cc3ee3f5d3b55626cf06651437fa849b865a01a1fe84675aab51215e92b43a9c1cc117cc77e583dc84c4d418f11abb923793a7c","ssdeep":"384:H8B6zE+wQ6cTsvOwSuLFGJbXEPOLZ1TKs5Pmt7LvSDYAU1I0uxd72tWZBhZzT7k:H8B6zEhFAzZzT7k","tlshash":"4303b8318a799249d935fc9a5f83ae90150d39c34eddf8c3849e1c1ceed5261b3b23a6","first_seen":"2026-03-02T14:18:34.653865Z","last_seen":"2026-03-02T14:18:34.653865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3479,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7KaUxU3juvgpqlS1AVTb9coz6cNtFAGuqdL4s1a%2FKAaHTyW7tiNlVApNs5cc%2BTUA17wZ0Frs9O9ZmTNrxwuNKg6j%2FJyOgtEj4Bsb%2B%2FGwFLiEQ%3D%3D\"}]}\r\ncf-ray: 9d6106fde9fb9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45817,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aa6df0bb476cbdbcf162afff188bdf99","sha1":"f47e4c6184a45b2c1e754443994bffbf74cd08df","sha256":"1b2453632b6bef62efa140d925d43ad85c9e3bfcd82b2883140d52b10fa1ae05","sha512":"2f1aa1ef58d601b207c64366b58deefcda8379345d3c06f256a7157b29cd0508b2eee20aa090b13292e9c9aaafb120c3ca1487ff1624af36f9010fa875bdcf88","ssdeep":"768:My4a+R1NGfmh0SOaWyRdYO3zf1GZTC6Gh02Rp:MyYRD9OaWyRX71GZOFh02Rp","tlshash":"0723c3728e8aa14cc4348c925bd3eff28e5333d356dd5e013eaa64522e54326e357f86","first_seen":"2026-03-02T14:18:34.654967Z","last_seen":"2026-03-02T14:18:34.654967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3475,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nq8kMfVcjxijWQT9IguZf%2FLWyxfy%2FlP154cWoYSScwwZK6QyWs6tvgHsenpF40i5duAR5GW5XUn0ieDO%2FL7jRckthPpkDzQdQRF8ot49K9fFIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f3c9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxB38TJzs65-lOBYdDbGbhOEI01I6SXI7OZWUAAIvIyBYXe-MyJFDU_0fEd7PSlxRJF\r\nx-goog-generation: 1745019071782236\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7196\r\nx-goog-hash: crc32c=tCfjHQ==, md5=kI8WMgoKMsgRfKlDwqojHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7196\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:11 GMT\r\netag: \"908f16320a0a32c8117ca943c2aa231c\"\r\ncontent-type: image/jpeg\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"908f16320a0a32c8117ca943c2aa231c","sha1":"b49e31cd823528649adf1b0fcab343e4e6055b33","sha256":"2a03254b988fdcf3c84ae977a221b83ce9d10f896b0ec508fcbe877c22ad9161","sha512":"531db683a9c449a6d0ace9b1e73a6bd3561c54d71f0421d4255b9698d7bd12c74779b7805cafcebd0fd50c437c64f29d6d761af58e57fa57874b7df5cbe1c06c","ssdeep":"96:cmO7bsMr5XAG3VBRynGlNqbRuYrkVkls7VOZ1d3AHI1K9v3Tv9Cre:0xrqGlanNbgYoWelkyZCre","tlshash":"8de19de8986016208ecac5f0598578a3d4f893cabebb7e4a44896e01c6555ad3f52f34","first_seen":"2025-02-06T02:55:20.514077Z","last_seen":"2026-04-07T11:52:26.924617Z","times_seen":91,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":148,"dns":118,"connect":21,"send":0,"wait":24,"receive":1,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGYrTP3%2FRBa8%2FLiRGIFKW00k6XBrZEx0OycAzjRQdTtc079H6YeSxls9vlnrezViAs1Y4VUKBj9uIR7sMZ0%2F4Kb6LjHXogM%2BAQrCdpkBCw0olg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f389a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1819,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAk4XaK6s5rvNloRmzcL1mXUt9ysardAk1EAYcMbKUK6Ho8Y%2B96Ma5Xwv1UM%2BROuWKfneua%2FJ4KditSan%2FO9%2Fx9ciCXbwhrY%2BfIzaUBIIUwzaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f339a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1804,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pd8n9xlt5%2FUpowkYghQ3xCIclzQLUMcXPYtY%2FjBidMhAo7BZjH9Vy6RiAdJjt1Y1dyW%2FIiTAig65Z0%2FVaIk3G0qGf1J5CQJ7SETpohyHSgadzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f369a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1797,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ax95rQ14Xk0vJh%2FXq5EL%2FaAS98iI1b0F0fOvzsImpECMitl7CXYSexcqb0zAL%2Bd8OiNJ9brJQBHduQxO4cWcLCsfg1aK88qAwsojhB%2BYg7XkOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f449a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgDP4y7xZpto1KApS7Udcyg2N%2FuIjXU2x4Wao9VUdrLZRWoNMxCb1%2FRiNmnmbz%2Ftb0qiyTP1oLtQXStZIUX3A7N9nMlucnURlt0mQykPuUzg4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f479a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQNHT%2B%2BzudeHDX%2F83AhPaRMqo7tJS1D%2BhgAi4o5lu5lI%2BWgImgVbDwOcpDFr2rYhfBNaMXcEoB6mcSMVBrLtD0xLpn%2BSsWqSgAUqGNfufOBejQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdfa019a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41733,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"276df72151fa151a704b4e5927e1225b","sha1":"f063c6d4b5d060a8502856b0f0fa2adb8d291f61","sha256":"18644baeed5803b37330a918ae1dea068881d3f0d53bed5befb767a67047fec4","sha512":"2c41e8a26f2fd12cc3a1cd06f20cda5867bdb58a012e3ddec062c2a48f7b6e0f2de890166c26b6deadd5dec1e451e997928742155075b47fb6c69b65fa2ebe06","ssdeep":"768:8BOO5kHdPkECbh99Tz/2VAUORyKUkkgFapYI6Q2+dcAnW0I0b3IVm8mnFt:A6TmoYIf2+ZnW0IwIg8mnFt","tlshash":"ae13c138dad9c2c9c4319dd62bf3bce05a6734d34ece0d51459e18203aa6f3be915b86","first_seen":"2026-03-02T14:18:34.658704Z","last_seen":"2026-03-02T14:18:34.658704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"kava\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnrRn6X7ZTjYcktB7vpFHXDBOo81Xkh29vn9MBzQsf9pryNUp6rEMjA3AriRrLuS9BVR2aar6Hr%2FUEGLrInc3aPfTizLWr8hpkecuflG2izMTQ%3D%3D\"}]}\r\ncf-ray: 9d6106fe3a119a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38063,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a7340716cc8a56b614491ccb0923f625","sha1":"a3de69c6cf32bc3b50afdd6e4f1ee39e5c3f5a4c","sha256":"ea21cefdccc575bcb6eeef17261644d852052035806ea3e0252fc95fa693eeba","sha512":"ba1d003be90ccf0f583e6cee11886eae1803b3a6566e17f9589ff0694396aa9b45b1dd0992c3d9796d75447992e1c6600c6304918b812bd900b71e4832e79a24","ssdeep":"768:1D2VxYEYrzqKiv83vfc9MrVd0pnlyk8s1:E9kqKiv83vfQAdmnAk8s1","tlshash":"4e03d1f04ac8d649c5304d9e5f836ef066613ac71ade0dc344bacd347aa0366f2997a7","first_seen":"2026-03-02T14:18:34.659866Z","last_seen":"2026-03-02T14:18:34.659866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/banner/1.jpg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/banner/1.jpg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-8d53\"\r\nexpires: Wed, 01 Apr 2026 14:17:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgfbkEHmwNSKHoclVVGLXMryT9FH%2FLmBgKmryGNxenyXb0wwyNOJET9nPhgdBHkFTQoXct8QilCv0Ni2BLhY3BGB49fogj%2BQjJ%2BC\"}]}\r\ncf-ray: 9d6106edfe039a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 714x400, components 3","md5":"e58429ca30e42c6a30fc2a6952b6627e","sha1":"a9012798d41ee89a4b10fb8b6679a3d4aa36b12b","sha256":"0cd45dd6b5188cf087d1908eda005d6b6face1a3eb9b3c4f2213166a84b87124","sha512":"65de29c1b05a8882ff303a3191f9d6faef6428cd7cf9afbe3048a460971d1476f88a65ac4333c52d12f7543cf35f3fd81385e6b9aeb5f255106dbd13336d2911","ssdeep":"768:16ikoFtGa5F+mlsHe2PTphfS83Cr2yfiAS+dL1Mn2CDbIQY6lskUXZkmV6WAtzH:DLthrp8e2V88K2kxdU2wIQ09X7tA1","tlshash":"ebf2021ba8e0b1d3c65f82787617349f4d07e7057802ad4b37843ba6ba0d771b46e6d1","first_seen":"2025-10-12T16:34:39.842006Z","last_seen":"2026-06-25T16:56:23.767532Z","times_seen":80,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/ai3.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/ai3.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-1baf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tq3Hhzm1CfURMwToyB%2FJ20Dswwr%2FGjkOGFDV09EXh7HgxP%2FNysQkUKU%2B%2Fh6TQKIqazF9FO8f%2FPmsF%2FtWu4q2gOnI8AB8f3%2BeCS84\"}]}\r\ncf-ray: 9d6106f1defb9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53e7b1117a8526f6eb229df446cc722","sha1":"bd13b10b3d466c27cf406fae1a07adb3650dfd9e","sha256":"05d9270b980c401bbc75d3374fc10b459f661b3f5420d168daa5369d8fc8c48c","sha512":"0e693efa9349078257f94a89a7acb5f3d892ceba824440516c2c8fb88b71e937923ba1bd10b020d9cf2e80985fbd5f0ddefbf9176e6ad341a17caf9dfc7da856","ssdeep":"96:UN24KuLu7W0X/YIRcOMlit6YO+0hR8Kob/RfZcPRDg4rQA2EOAl6NkNLW4nW/1do:skuLu7CLOMlit6tvhRLlY5o","tlshash":"17e1652ab3aed97af148d3fcdb008435716640e3a951d261c2e5be1f982509d683e9c3","first_seen":"2024-11-30T14:01:13.939903Z","last_seen":"2026-07-28T18:44:07.245473Z","times_seen":148,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6%2FqFLxPdS3fDBgvMnZX2gcTfCuzITF9YE%2FAZ7zrYOxWOeByTWE8AyR8QsOeoxMGbP6UlDukPdlOGwPK9QBGRmdPs9x8AzjZNyfgKfx3mFeCcw%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f49a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40606,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"703ca5a65b87515a98c77b3f3edc35a2","sha1":"c440c7f44b4f274b68446343945e37dc88fa230a","sha256":"5473a78478e0eb4863ab876fb9479bf6babb1093335fb0f7da86913b7f137d58","sha512":"9620aad2b23619563d99377e4b1456b533f2efd82ff5b0af6864e0108ff7e4f6b195b19accec179c6b79076ae0f2447d9bbd698e49ceb56b2db649efa9524331","ssdeep":"768:AYO/wnjyFMi5lFzFoVosz6l52DsuUkmCtJZmRR0MM6gqZL91WneW4NhSM1j0vhyD:cwjyFMiZeusSolrZ6dInMAhyILS","tlshash":"e40337358f98dc4dec358de64f93bce40e1233c34bee6e6149af49513a9426de105ba2","first_seen":"2026-03-02T14:18:34.662057Z","last_seen":"2026-03-02T14:18:34.662057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyXHBIPSjetfmF7O8XoXL5FlFupgJrx4YGNlB8hQbg7aZvsoasbFk0ZqiQPWndC11vb\r\nx-goog-generation: 1745019054266672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9320\r\nx-goog-hash: crc32c=NRpzvw==, md5=8Rfh7LmmWZKkoSeq5xR/PQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9320\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:54 GMT\r\netag: \"f117e1ecb9a65992a4a127aae7147f3d\"\r\ncontent-type: image/jpeg\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f117e1ecb9a65992a4a127aae7147f3d","sha1":"d31cb59eef02bef662f2a32927486fdb0bba9938","sha256":"c41539a30a96d819192c0088fb339eb265079a33b835550da4d67e239ea658b9","sha512":"82a5726b19387f79608c7ca92ead96d09e0bce5d08ca0c607b93412e5110607926ae426b869bd993a72ad0f586bf82c39099ed02e051fa0a573db3ff1345444a","ssdeep":"192:afKC5CG/uzpL2j2tll1RXLhL2yjT0qLiaOTMNEdiq:ayCEaQLzRbV2cTLLiaOTMdq","tlshash":"90128d85bd31deecfdaec33917d3a316e293e93b26d149a851026b1048d3a3e5217635","first_seen":"2025-04-17T23:40:09.012509Z","last_seen":"2026-07-07T13:51:54.928838Z","times_seen":90,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":139,"dns":122,"connect":8,"send":0,"wait":17,"receive":1,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/svg/dark/notice.svg?2.2.1772455846386","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/svg/dark/notice.svg?2.2.1772455846386 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-76a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaKFEPXs%2B4KDf0Fa2bcFQ7oat1bCHujK1b%2BPhGzMbiIUH3RwR3dReoMpuRcJW78GrUIrh5wHAwGXFXCjNLeGxZphUT9gfmFz%2FO1f\"}]}\r\ncf-ray: 9d6106ee0e059a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f262267496bf86de09b562db82a676d9","sha1":"a9163b950a68f56705da45159ba44533507505c5","sha256":"8c02636fda22906716b1b028e7dfde4a436cb95da0029bdeac8e201030f344a0","sha512":"c9bda0880dbea6da7260578858be5402c6a62d85cb8f8639f2313e02f7fda87ae24d05de9b87efb86dd1341dab2165b9d90524dd44d2d1938b25b63a2e1a6c6e","ssdeep":"","tlshash":"364175c659f952e4f2cdc320d6a731051e6a747730e1026cfeeea5656b308f90f8e049","first_seen":"2025-07-27T10:32:31.414438Z","last_seen":"2026-07-30T19:44:59.513493Z","times_seen":117,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBVw3pmQ0ZSpg1KyVuKP1g8fg7Ec4hlzS3JVbfRMQL4MVKorUIgRDjFw2f2gQxoD0iJB0s1hcFpqlLYbwoOPYo5G50f7A8A6cZGzniwaJib5uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f2d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:47.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwRw0hFXMm7w12jUxG%2F359mOPtMl%2BMZJOMJ2zLusXNeoEijLAiRH3eloSog7%2B2Jm%2F%2B9SGDHAnqA7WAcmDSDCbkwBQ0jHHHILKDkNm%2F%2F7fFNi9A%3D%3D\"}]}\r\ncf-ray: 9d6106e9ed289a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"53d29994640ded2b0dce5ea38dbba2d8","sha1":"c30275693c769b4a7b6a2185dc7ba42f5ae7edc6","sha256":"c18ee542c9333484cdc3a1fc20d31dc1f6e44d3f08febcc8cc9db2f406e25b4c","sha512":"b155c7cd36ac92ac50564fc837b5a5df739bda5a313736b94e1a73979dcba1e8ce0912c6739c232d55611e346d2e1735504397b6c1e6993216136a2d687df653","ssdeep":"","tlshash":"00a02200ac088083202b08820223020000f8208c2a000a08fe8ee330c00023a3883888","first_seen":"2026-03-02T14:18:34.664534Z","last_seen":"2026-03-02T14:18:34.664534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/spot.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/spot.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-59a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yejK4AOH0Ye%2F5Jk3S8PW%2Fgokm9R1YjiCWCmGaCt2r6t2tEkz08gwjGPqaGYQG0Ye1PRu7%2Fa%2BcFVM%2FtZnZkBbrVNDcWmxv6cbbY73\"}]}\r\ncf-ray: 9d6106ee1e099a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06ff7119039a86ea843fced4a87b0c04","sha1":"acf0f480f5288cc094e99382bbaaa21b9949135c","sha256":"f72d9dfe237a308134226955b517b808c348468794ccab477bbf478cd1c49007","sha512":"30b10c415d76e26ff9105a1803919314a81a3234d1254f3210eefb9e98ac35bc52ecb242a7cc2dadd1f01ebb3a0cf4bd774e6cba135cb89fb416560c18c8b58a","ssdeep":"","tlshash":"b921e0bf97c536d0d56beba0d8138022f2b7647a3b2c8b854e74cfda530e059c8d9460","first_seen":"2025-09-28T11:01:39.207607Z","last_seen":"2026-06-25T16:56:23.772094Z","times_seen":81,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAAkHsQCD7VQ3Csv%2F0mgdOU4L0UNSWFTzzbWDqUommDrzJ%2BIPFgshEugWKWGvdfIICXgbHeE8TloLuoSGAy3Fus%2F%2FEbdAP2sReTYvCHCoSAHAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f4a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvsqNpFVEE6ecXxJGcjBe8RHaM%2BzacbWxj7VBx4Fdl7Jp0LzC%2BpnaTEYKWiYM77hvVwj5uYyQQYo0mlAiHrzK5XQmW5jN%2BUmsJ9SVlULp5vmvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f28f529a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3R5BNeOo73lM7VGdBbJZo0ctEe474npzt55RqtEFpHq2XPRa102yE3b8Hq9PvENnLnAEpk%2FLQhL%2BD3xOZFeQg%2BbKBJ%2B5v9j1qh4ChVRsmyZkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f4d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/type/defi_activity_type","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6%2B2FfNPIY0lnKK%2FDnxyM0VQqWKGRvHjHE6OCtPS8XR9C2uoapuoUi8SB8Ov3fF0SPRuNSxvZBVmKvCbckXzwAmsepoPolkJ1pX%2FhCe7tv03Cw%3D%3D\"}]}\r\ncf-ray: 9d6106fe3a0f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-07-17T15:49:17.790097Z","times_seen":181,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:38.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9d6106ada8698a33-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 984995\r\nexpires: Sat, 20 Feb 2027 14:17:38 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G%2BhWnZYphOvAsLXPCIKjhVUWYJlGsBSbGvHhspa1jchBTPvSnX%2F1EYgbiAd4ZZzggLuDvWNWU1ooQASQxkiy3eLkNjz%2BsbRyih7HtBIPJ7P1RDDwoJ3aHXq4LeCeLT9FKP%2F9r9gQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T13:43:29.965606Z","times_seen":34342,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":23,"dns":0,"connect":8,"send":0,"wait":25,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/vendor-DVoNlCS0.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:39.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /assets/vendor-DVoNlCS0.js HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a595b6-222a50\"\r\nexpires: Tue, 03 Mar 2026 02:17:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtJu0s2KVhZGVZS28qfJFrZU%2BgIdUzetocOIcnpqL9N6th7OPhPcfaLV%2BTw4yr21d6uGEYKom4g30yU1Y%2Bc4Xjj3AdTrZXRv%2Fyx5\"}]}\r\ncf-ray: 9d6106b4b9019a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":1031,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLghW9PA%2BwsqTs6hri8V686K%2ByR2Za42Wu5vdhafh7KvjztE06fEK%2BNypIBp7xWhKGgzauT5Z9fcUCe7OVeMiVP2CkeRbIwhOlTHMfYpSAjb4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f28f4f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYj95NSX1FrkGovM1p1kZNjXxAsUKWp3HdYj8Idzw10hmqrqehNYc7oeNMsxuhLcQAA5fr7o9bpGT8OSUXMsV2Lu9ENwHMpDmX%2BKWR8QSZlKoA%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f89a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"09200f0423756a253a20a07791495420","sha1":"784096df8d4b1a87baf15f34a7e359d85ec0e1b9","sha256":"84f61fea6fcdbf84a27806ea66ef4b03fe87dfa39925bfff11330dc170ca77a2","sha512":"b5381b7feb26dc6b7f3c6f9208ff0e788a26d4938e8f939cc62b2a80de3d6cd44330f1e359e8b579b4898d6b7401de3ccd4a9c79768be5f01d9f8143d958499b","ssdeep":"","tlshash":"f7f0ac0e59788ee609091ac321c87dc8a9ae268bd650cc34aa6bcf6c85f057b1b07208","first_seen":"2025-10-12T16:34:39.689421Z","last_seen":"2026-03-09T15:15:57.938706Z","times_seen":28,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/platform/axendra/favicon.ico?2.2.1772455846386","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /platform/axendra/favicon.ico?2.2.1772455846386 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:41 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJyDg%2F0cnXGAv02eC90MoRlg4X4ZhkdUHUM6r4txo9D2EeKM3gSmN%2BsAQVM4uFrojij1bd3ceoxvwTU2UOZJpvbvGyfwnl%2BWZBSx\"}]}\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 977\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69a5959e-506a5\"\r\ncf-ray: 9d6106c2cc459a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329381,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"acc9bf2f9e58e46707e41999142af60c","sha1":"3babcd15e9b45e07665a58ad7c2677d0610badc2","sha256":"dd9f3b9975c3bc7bc75dbb5156a3f26cb7a3492de70c8aedc3aa537b6d5c0283","sha512":"f8b78232c648160a847257abe46e4b6d3603a46d58805093d0caf7a9fb33734a95dc5da6161102f419d589c4898837d61dddeb85d433f94bd82085f08f53c4f6","ssdeep":"6144:RdrSTHQjalXNX5UjE5TowU6buk18mvAW9KWclYvXfAYPoEJb58E7i:TrSTHQjaBN5FfUA184l9lclaXfBr8r","tlshash":"836423f6b2fd8f21fbaf1302f3b10e7162755b706be118a6721aca51c4196321be1d08","first_seen":"2026-02-25T17:49:59.548689Z","last_seen":"2026-06-25T16:56:23.771522Z","times_seen":38,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWynwt5me0c1Pu1HpWsJsY0Lpq77Z1dFpkQNTee4j3UAcUmFd3H-Ggj153F5dbWJHtHt\r\nx-goog-generation: 1745020334043985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1717\r\nx-goog-hash: crc32c=Nlh/mQ==, md5=wDYR9+ijfd9z5qYqQ+rRlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1717\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:14 GMT\r\netag: \"c03611f7e8a37ddf73e6a62a43ead196\"\r\ncontent-type: image/png\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c03611f7e8a37ddf73e6a62a43ead196","sha1":"f5d6f08be3d751747f618cd7af90f4ec8dc3d97c","sha256":"a19e79dd72b71fadceabd2a6cfcc04b18738157e104b54cf960eb17ccd1cd6ee","sha512":"968346372809cade34940284062a06ad5811a15ff481584675cdea3d77addda5b6da00562479f7ac4a98a8a289d70cde9d409d024048039f354cbc5b200edb08","ssdeep":"","tlshash":"39313a46b4497a5e02e204ff815da62b0f99ee43f0f89308ae60d04c3d718cfc91a0de","first_seen":"2024-12-03T23:58:43.643729Z","last_seen":"2026-07-17T15:49:17.769445Z","times_seen":110,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/9d183a3462d9400cae9391f168dcabe9.png?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/9d183a3462d9400cae9391f168dcabe9.png?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWymhRJRcTX3eynt4OrQ7V498aFYUnp09PVdWEN5Z-uLFhB9OMv7vVvyL28BOJXOICUS\r\nx-goog-generation: 1745020399467694\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 578\r\nx-goog-hash: crc32c=oSmETA==, md5=2t+hjx+vRlybVaND9eBOlA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 578\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:53:19 GMT\r\netag: \"dadfa18f1faf465c9b55a343f5e04e94\"\r\ncontent-type: image/png\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit colormap, non-interlaced","md5":"dadfa18f1faf465c9b55a343f5e04e94","sha1":"e3ff2475cacacbfad5061c55dc3b487988405f6e","sha256":"48aa7feb7f5113a32d51df9560171e8546e977080beb2a08e5ff1e26dc3b73ed","sha512":"ca526872da2868f6999ef426c0c1d340eb4171defacd8e02f843437a148f631fc24cd738fd151f01b8b06d9830d87457f9d2801c3bb5e3b14de588d7d040447c","ssdeep":"","tlshash":"a1f081f6cfc71c54dbd8d1b9837a9764fe8611749f1345ff950085518856805c5421b5","first_seen":"2024-12-20T23:51:30.266177Z","last_seen":"2026-07-30T19:44:59.527831Z","times_seen":54,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:47.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:47 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dkuc%2FewKR8XYnexIYXPZCzZV4YMvqoPEUjm%2BDYZk1g4UiVfc7gEf51dfRA37f5g4%2BbbRawbDE11IoWARJrq65Pj4EtEEslVWMI0xouUEQn6swQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106e87ceb9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/cfd.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/cfd.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-4e6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7NrtCtteyS5eSKHzJE7IrP6vCFrTuxKOhe2BODC4B96dTGtrmg4IkUw3CwEYOsmejK700FY47rsljUCt1zFtncqeRyfDLA97tw1\"}]}\r\ncf-ray: 9d6106ee1e0a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9115373205114c25f64dce056a8be78","sha1":"13d9c2d8ebedda0987493bec5ce299632f7acbab","sha256":"22269448e0257c0fd850d7c54387dba3d5db86bd4f3bbf651038653801c74a05","sha512":"399719ccaa22a2f3800f0daf2a973abdbdb84b6a8f24f546d49012362852772865eb78c94870511816b777f0354a9d1a291b39737ecab05f77f4cb322647464a","ssdeep":"","tlshash":"0821325b7386f190c5475b90c463b1a230e975faaf04c1958e49efc5a20e0bf48ceea0","first_seen":"2025-09-28T11:01:39.572211Z","last_seen":"2026-06-25T16:56:23.776083Z","times_seen":81,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xaDqurn8jChSl63rohqlbAh6dWVIdj7eIRMO7%2FRIx3mPidQpk2HXd%2BhDFNJqqHawxM%2BGBTuYsCdPPZReTyIY9T6sPjP7Ev5s93HMD5vEC1jow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f379a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/47b23749312240eda5e699d778e2c0ba.png?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/47b23749312240eda5e699d778e2c0ba.png?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxE43qKkdUZdwnoomcJ9kJWnYW5WHXLu75F_aurBCtdN4M2uzg_heuJH7lA-5oGA8u6\r\nx-goog-generation: 1745020297149372\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1188\r\nx-goog-hash: crc32c=CwkW/Q==, md5=lmqvQfTbhPbwMT92Tllfhw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1188\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:51:37 GMT\r\netag: \"966aaf41f4db84f6f0313f764e595f87\"\r\ncontent-type: image/png\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"966aaf41f4db84f6f0313f764e595f87","sha1":"ec31ebd55b615166aec1e4bff4a95366252f957d","sha256":"dbc3430ec06cacc10616c517f710085fd959912984173da9798bd95223efe816","sha512":"3bfbad89056f33eac8910a9d416780d6818aece383fce4b23f2a658b657a42e57a991a92c7ab958da140e3b293ff62b25771ccc0ce092c9d458d23e0ad646d9b","ssdeep":"","tlshash":"0921da29d5ed9095521586cecf0d4354d012ca70e4c42437bdd3b3f27651aa2405ad81","first_seen":"2024-12-03T23:58:43.681666Z","last_seen":"2026-07-23T14:02:31.750381Z","times_seen":111,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/charting_library/charting_library.min.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:38.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-2a6a\"\r\nexpires: Tue, 03 Mar 2026 02:17:38 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxd%2FghsLiV8U85Bs2lJWpsOA13USxAideOw31dDl9Wa%2FU9XQrexzmZFlGXj%2FKncFOnV0k77FnoDMkmaFodohn%2BDDutL6m%2FbDHNOU\"}]}\r\ncf-ray: 9d6106ad7f819a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-08T09:33:39.973892Z","times_seen":1326,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/dark/next.png?2.2.1772455846386","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/dark/next.png?2.2.1772455846386 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69a5959e-336\"\r\nexpires: Wed, 01 Apr 2026 14:17:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nJX6H4ZlZFll0Ql7Jt090BhxXpsYu9MPhDEGp6xTX%2FHbYTSVc9JyyUM4oq6uvnibgFejOM4ajYcyDXF9pk3ZUzVvniLjdAPOAXB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106ee2e139a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-25T16:56:23.826643Z","times_seen":100,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/svg/dark/huazhuan.svg?2.2.1772455846386","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/svg/dark/huazhuan.svg?2.2.1772455846386 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-b39\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgYQYegdo%2Befk2NM%2BkYLX%2FpDnOhpf%2BUPwlOUPF9yLU3k3qk2ytywNdjhZFU4zzy9v%2FgXOLVEZaHPCu1qOG4j%2BZwYVxlQ0oKY0cAf\"}]}\r\ncf-ray: 9d6106ee3e149a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2873,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d82425ac5150ed01e5b427e55abc3f","sha1":"7627b7ff42018aad3ebdf473e73e1d93a5957558","sha256":"c8e61f65b639b0f4753bfacd166fb29a2191a9554e53c49fa02479af78bc36a1","sha512":"3ad79359f100f517e60bf898fbeec11276e119c4b3668e59a8b883c66a9d3686777f6674e45de7b5cb5dd32a598bdaa5fea5a70c83f158df67cb17e545982346","ssdeep":"","tlshash":"dc5186d4523d939de0089fa4e7b631c6353a30e737d01690f2cf12576b260ce458d9ab","first_seen":"2026-02-24T16:10:35.251591Z","last_seen":"2026-06-25T16:56:23.820444Z","times_seen":65,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8l6qzEQmh3b1qUoqvdD4sT%2BZ1YOzUPpDFm7BriFmUtiDGFhw%2FbD9NQ4Qsx5mFshsu1NFctPDpoqHfMnIK6jpzliF%2BnJkXCoWnGzlxB9pZ9pPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f399a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2Ff8wJUt4hjVf6khMCpRAvpORAmOEb2my1ge%2FVZQVQcByDdaJKBdkAOvuGyvMq%2Ff5yM4hFxRk8NZKPBmuJ533dooBANZcfGq0u6d46S2mN7qdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f28f539a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:50.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8jUnh90IuWrVuA0y79RProsn4Z1etVRN2qFp3eZfuI30Sbo3meBsE%2B5rSStdFuHC0yQrFYkbSKFGxegCEkfAvdqNVDQ1genjfW2ipovGgoXlQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f29a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9f7cb0f855783065046b21362d0948a5","sha1":"843bcca0596ee7e096a5b634e7a572242ba02c7c","sha256":"20e17298c0054b53832be39a8151a35ed1cb6486885a18377082ae4065fa275a","sha512":"216242280e34e4ada1e4f193722ea09c3449badb90dcbb26abf870b78fd24bc5e19d1e3a30da4c04d88af91d9f9022143c57484534b804e86932a8a2c2536ce5","ssdeep":"768:NMM5S4ekEpVIymHrTy2iQ0Z7iAwQ8p2J/hUoc:JreDIymHrTrz0Z7iAwQ8p2J/hUoc","tlshash":"b7f24d79ca88c0bac8359dc24bc3bce0491b33c746fe6dd125bf94712a98727d615b92","first_seen":"2026-03-02T14:18:34.672968Z","last_seen":"2026-03-02T14:18:34.672968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3496,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":3478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A82lFbCqj30gyTXVz5PNN3882RTF9CAPSHJf%2FheWm21ViZp4FQiSqZYV63u7kd%2F4h4YAPKLhCFhmQwOp3FOYNWkmrS1zujAk7UzUTXB8KVOeZQ%3D%3D\"}]}\r\ncf-ray: 9d6106fdea009a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45700,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"51a1bac8bd5104b4861ed96b6b05cf60","sha1":"1a6e412a7478fef4b214c7227e9825b15224f0b7","sha256":"6fa7284dfdb004917def6ceaa437da05f004d82a29afea8f00dea0704e3fed5d","sha512":"b5794fef5cc419f24333e27548ff5c6a7837f29d56fe02dc06eb9abc2ec2554397223822f8f4251de80a14f2a6e7331e5a2a8ad748ed8b42728797c310b95de8","ssdeep":"768:9R3Adk9DEmSwal1JoR/RVwRW6iym7dPpK3fwdXDi/J1Hz72VJk3:DAd4DEmSwa/6VwRzSdg3fwRmJ1T72VJ8","tlshash":"7b23b875cb8ad049c4f48cc63f937fec8a5331f26ade6d11329a4910e966e2af355342","first_seen":"2026-03-02T14:18:34.673894Z","last_seen":"2026-03-02T14:18:34.673894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3471,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/index-A8xeihCB.css","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:38.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /assets/index-A8xeihCB.css HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a595b6-b9851\"\r\nexpires: Tue, 03 Mar 2026 02:17:38 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wo1dYojrDI3Z%2F%2BEUtoQdjTCwGd%2F%2BWU9BkeWgD0gwwjuQnteY37PgKdVog2OsIwibWSxE2jBqo6yU%2FoYkVJC0MzcuYDzLucPaBmNF\"}]}\r\ncf-ray: 9d6106ad7f869a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":759889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"00281560f655a93890342603ecc2534b","sha1":"3ee2b225832fd7feb6ba7a2a89de7bba9ed85cea","sha256":"c22a6274fdca5c7755db904c150a5ae142010ab8362ede0bf194f8b92e3a5cde","sha512":"34ef4e8b826b35ee25611a6e70e2ea6427a4ae6582e16cdd9c1e65faac3c572b4983dd384a1a2c68dd8cf56e9d64cccc4f351fbe2b11c326ec3db379099daf18","ssdeep":"12288:qv1s9dZ8w71ZACkFDS3vyf58rBeV05TnUq4CA9VP5mmXV2Ru0se6knu:qv1s9dZ8w71ZACkFDS3vyf58rBeV05T8","tlshash":"f6f4d629b58410387e37d6a57fc85acce12cfa62d4434ee8f243605a4ec77f7276261a","first_seen":"2026-03-02T14:01:20.277263Z","last_seen":"2026-03-20T19:46:41.744805Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":601,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/vendor-DVoNlCS0.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /assets/vendor-DVoNlCS0.js HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a595b6-222a50\"\r\nexpires: Tue, 03 Mar 2026 02:17:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgNBq6%2BOL9yBj92DWu2msyPBo%2FINmvjrERLllxTL%2FU9Nv1vS3M5YBdHQEplEiLieZVaULTH%2F1XD3XHCiqpIjnTAdGEgQTpj5jt8U\"}]}\r\ncf-ray: 9d6106bfbbb39a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getCoinList","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hB6ZbEVjpOsy9UjyFCmzVbzDE84Ap7ulpucC%2BHQiIknKTp3UMPrwDWCr2JA6A45Jo1nfCaHLKJ9mPXObe%2BZUUD%2BUpgv3c6YmQpBcPkOYwvZ%2BQ%3D%3D\"}]}\r\ncf-ray: 9d6106c10ab6e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":3005,"timings":{"blocked":41,"dns":0,"connect":8,"send":0,"wait":2919,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/enK_.gif","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/enK_.gif HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-53921\"\r\nexpires: Wed, 01 Apr 2026 14:17:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdxVeOXzVdbhjoRSG10Q8U3nGWM7Bc5N5KRpGhr8Syrfe0vb7UaNmkJ9STzr6a6KMy%2Fh%2B5ElbyvoRGSYYKZBa9JkKvsCcv5w6OYN\"}]}\r\ncf-ray: 9d6106eece2b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342305,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-07-28T18:44:07.214411Z","times_seen":201,"resource_available":false,"data":null}},"time_used":1219,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":418,"receive":800,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Eaji63st6C%2FoGuyvpgnMvuChxl8FqqBzTws%2BXkxjIpHv7ry8piCv%2BDrNi1XtTl06lHdujZcQ%2BK2l3FwqkMaRaWCyZMuTzAxejJeu4d%2BBXth0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f349a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hATN0XCDUYRq%2FXBHiNRNraj7SXwV7Y10V9XI6HD2wkU6sJN%2BQyuQvK9NPz7LVOm8alSPt%2BArtUKRj0EOMLXtcAfvWcUq48Kvzd49EHIImfB8hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f27f3a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vsix5tPXK98ZYdil9xdgezFElxHHd5EwiSQvR%2FQ1LOENBj23XWRbOlN0jkxoAi3Q0SPb%2FJrhGCQS16Yg5ZN3gP8aVd89O6Ya9qZ9esx%2BimnJmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f28f509a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"dgb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgJbY3M33rjNa7DEntDh1AA6UWCXIZrAlD%2FSJicz4zzDu82ZTQy%2BWxDDlaDTGfdeeuJ1PMst1UTTuldV9Ko1Ve%2Bh74nRJZxYUXt1hdXKKl8u%2FQ%3D%3D\"}]}\r\ncf-ray: 9d6106fde9fc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40161,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b0d3b6cb73bd621ecf520892f71840ea","sha1":"13d06799433cf9f645dda683cd1cac4be83fe1f1","sha256":"038e7b696d79dde4535a8580a39450a949a8d7fc1c87b575af05b958e47ee4e8","sha512":"80ba9f4f99b48d8bcd6bf2305d157ba92e71162fabddc39d3f72d32b948cf41ee1e69479d060a43e4b309c46f97c12199d17b127fa3cb7e293d25b877c291db3","ssdeep":"768:4td3ShelsoX0msJ+F2EeAOdzMoQkiDDmUQwQuIXF2R:4tZShelsI0mQieAOdzMoQkiDDwuIXF2R","tlshash":"6203bdf1aa88d1cac532fc8a5f83ada006153a934adc1dc145fe1e3c7a547d2f1857ae","first_seen":"2026-03-02T14:18:34.676188Z","last_seen":"2026-03-02T14:18:34.676188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSUHGvPpimujUsQXBYeiZngwMSmote5h0mVDQyfwa8gP1aebn8IWglk9MUd%2FnsqKjusD3rw6Nfz4D%2FUpcSj7gt2DCL1wArZOzBBvFexsn%2Beomg%3D%3D\"}]}\r\ncf-ray: 9d6106fe0a069a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35732,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99b5ead805485b196722979a637457e4","sha1":"97b74e4c4a645cdec91f910d4cae25d6653a823d","sha256":"7f1ce33a91bd67092828349cb962e504e73dabe5c756c8d46e34f17ee6d5703c","sha512":"87158ab0986c6cf9a6d95e8f40c47545ccc6fdc3fc0145837ae29548f8e874cf61c0899cbfbe2241a2b0fba9ec54de9c3d35c1de92373cf73548a4033d184f4e","ssdeep":"768:hUXFlG5YcuYFmn2qvqcc0q2b/DM/TyDBVZD2CpBcD2lX9VyyJwEpFNbvjeyDILVI:hUXFlG5YctFmn2qv7c0XLM/TyDBVZD2o","tlshash":"e9f27db98f6ec19ad8334dfb8fd7acd4190574c32bcc9a0294bf91116a58673d10a7ca","first_seen":"2026-03-02T14:18:34.677144Z","last_seen":"2026-03-02T14:18:34.677144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQ4dRqK1JCzs%2Bd3J0zo6MC1%2F%2BxJo7S0h81uhR7TUkZLIzERB2ermG%2FaqObleZ69zKVqubpagcCMcNqJk7f8cruy1Q95PAYf96ID%2BwiKNz41uzw%3D%3D\"}]}\r\ncf-ray: 9d6106fe0a089a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43275,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"266cd94ce63a1befbf1ce3a042ce0fd6","sha1":"eb4a463f5d2700b451a9aa85bc6fc1b6c77f5129","sha256":"c124db618fd827181b61bf4faf019313f816b521c4348305a2d58444801f9e2f","sha512":"d6e6373e479088acffb76c77c1cb77c5052b5a430166199aeb150d801e736a54ea49e5fa2aa1f55600f20aaac14954d419ca40978f4f94dd1adc99c657be6cf9","ssdeep":"768:Np+PXF0JqV370apjAi/iO3I6KP6m+4Nadee0v4ZCm57d02ftR6unKRQ9:Np+PVw+5BKP6m+4NaL0v4J57d02ftR6E","tlshash":"35136c304a8c92c9c530ad9e1fa3afe4171239c747cd2dc605fa1c957b54af2a9853af","first_seen":"2026-03-02T14:18:34.678158Z","last_seen":"2026-03-02T14:18:34.678158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/platform/axendra/config.js?1772461061213","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /platform/axendra/config.js?1772461061213 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:41 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=au0XNR202BJKw0p%2BODfj%2B0v%2BhfZVVkpxp%2FlcXHwfbiYihDufDVBk9pqihks3ZNBIzWPDCc8A%2FBlF7L9SNP0DZcC%2BV7lv9gnvZkD1\"}]}\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 02:17:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69a5959e-db\"\r\ncf-ray: 9d6106c0abdc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bf4a50be346b56bbb39bbe0bc94cf4d3","sha1":"1da9457833f34ed3f043b0c77d7f8d35fcf555b5","sha256":"ea1cddbbe9b03685c2faaf79959af0139c3c5e3ae0f8eaf6409a4f026bb187d3","sha512":"6dd2d0596734826a559d310234c48c1a8f8c507afc2b656e64bd1d8b220c2f92d3b6911cf27912e9ef6f4940bf409cc42b9d761afcfb845f2c045cb195ded755","ssdeep":"","tlshash":"82d0c2f626b655853c44412f4ecc5931b1519237cc9e761d788d1c00af9f90c1a78432","first_seen":"2026-02-24T16:10:35.262693Z","last_seen":"2026-06-25T16:56:23.827343Z","times_seen":79,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/api/common/getAllSetting","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:44.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:17:47 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xS302bzkmGLlLwxXvLsAG1dD67W4O3JFjBA9doHmuZWMQr2HcLBjE5CzYfki335u3JTnzSX%2FAkLc%2FvxlxRg1o6ZgHgpyCjNlOVd8Asp9tKIaWA%3D%3D\"}]}\r\ncf-ray: 9d6106d348e5e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16480,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"71118572ba723f1e97882c150031b1b1","sha1":"f6e6309d16724632dc1066cc83432bfc7d7beb00","sha256":"fdb3c48030fdbf8a2648c18f48de2f1fdbf1ee1aec54a87e446961408735cbd7","sha512":"59e997a8dca5193723ccf3f26c463926d23a83f4c73d6e1a00ab06a99cd0a3887cc25b023f8ff5e39c6f46fc521cb8374a6b300018f736d5f43c8408f2b5c838","ssdeep":"384:Xc8BrP6ffhyIb32HCoPQVR2eJPMJd8quLTSCS+O69dbgc9yT/4GVF7LfKK3Gmw6i:XDBrP6ffhyIb32H7PQVR7JKd8q0SCS+P","tlshash":"2272738a31dc8c7e898bdbe650f73ae169681453d85aac01d1bbffadc5d86209c4710f","first_seen":"2026-03-02T14:00:54.648163Z","last_seen":"2026-03-02T14:18:34.680071Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:50.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0%2FPyt8ttRMAWl3knsG%2BOvfnnNBSkIKuWBBzmm9N0xpApo%2BZ5PC3e7VkkkZdx7fIcbOQVYr4te9UQ0CjuOb04fTk15xcp64beXM1g5ES%2FjGxpw%3D%3D\"}]}\r\ncf-ray: 9d6106fdd9f09a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40841,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ce8c874b4dbac4f187f9181bb07c3c12","sha1":"f95f8d808ed411d6b104b5824ecec8940eb7a192","sha256":"0ecba3393e2a8482ae786fd5a60e387245ba3b770d3767f1cb0f16d738a4a449","sha512":"448080fef31dc63689ea1564ad56ff3d53607d0bffd597d572eff5b6f43d997d8d065037cc2064246f5f23b307d59b955e698ed42cc1f6cc7c44ec687cc4b11f","ssdeep":"384:R7sIriP5PqSaoWgJeLBtejrPHSfORd4/wDOSrRf9Pimpgw62cmRixk:y+E5P/WVuTmI4CrGmpgw62cmRixk","tlshash":"f00384345b8893a9d4318cc76fa3beb0261639c34acd5dd521ef0c0d7a4136bd1a5bba","first_seen":"2026-03-02T14:18:34.680816Z","last_seen":"2026-03-02T14:18:34.680816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3504,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":3478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxkEdqfBXtn5O6pXbGfkpcR-65n6h8fYuFURRsxXgiJmur0Go8ISTLzdBRhenjc1jW-\r\nx-goog-generation: 1745019079859499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3817\r\nx-goog-hash: crc32c=nHBXww==, md5=+nrXU3XMeAaFfbxtWQ2yHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3817\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:19 GMT\r\netag: \"fa7ad75375cc7806857dbc6d590db21c\"\r\ncontent-type: image/jpeg\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"fa7ad75375cc7806857dbc6d590db21c","sha1":"973a54bcc76c2c86ad0a41a7eaccd8d2a2686a75","sha256":"8ed69043b1cea67b8ad4234d9fb6f18f44d424aeea7181930df009866ea5a452","sha512":"3934b78cb9f04296a8792c7ebd652454730ff8c5a97a4d7c1d6053f634a7d029d0577c20cdadb822430b57d5e59299f8e4564d9a2f4d84c8c08f10fcb3b43a87","ssdeep":"","tlshash":"1a718d22ecbbc800fc15db1a6d5b6562313b36e314d4e9f716cc0dbe2e1670486b0123","first_seen":"2025-08-29T09:33:23.930899Z","last_seen":"2026-04-07T11:52:26.857898Z","times_seen":87,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":149,"dns":116,"connect":24,"send":0,"wait":20,"receive":1,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/assets/index-D0SeUzuR.js","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:38.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /assets/index-D0SeUzuR.js HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 13:50:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a595b6-8c11a\"\r\nexpires: Tue, 03 Mar 2026 02:17:38 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GYzWb7tZcjFu%2F2mRKjZn3woK%2FGQxEn54iawREPzRpDnz6olUvEH7TalAP1EcD1Jv98giLzf7NqP8SUR0Dfi1kjsLsMkFHG6lCFc\"}]}\r\ncf-ray: 9d6106ad7f849a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573722,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64723)","md5":"44dccba7bbad53c59c2d9ef55de406d1","sha1":"827ae70a3ed0347c5f2e17b408429dc03194b164","sha256":"0fc2dd47be430063753e1f27c8510b0bdfd823f9736ba6946a600a57d6e45782","sha512":"a7ae22e84593eb831cf44c369f653fc5b5c34441fe248217d3f419b87cb45a3c2add80822cb7df6b44c61066f4e989305acbe5a0dfea23a7df1ee893ce3b5cf8","ssdeep":"6144:sWwJZejNx4F2f8GpkG22QqHrDqLYiB2sgVrLp77Kyjp3KIp:rwJZejNesf8G3vQqHr9sQLp/Kyh3","tlshash":"a8c4f842f896d9bde7b7a495104e2410724c3fcad04848e6b5fe9e062b97db8371eb34","first_seen":"2026-03-02T14:00:54.579898Z","last_seen":"2026-03-09T15:15:57.935134Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:50 GMT\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neaUen3aPoD4SHTo4v2fwSeXPiIzB96nZBXlmKLjF9DUdqwYVO8%2BIbQEolObyWLtQ2hgeDCgULf%2BBR1TioldJMcrY1%2BYwfYZCLFCyIWPzUw57A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6106f26f2f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T13:43:03.506394Z","times_seen":17780009,"resource_available":true,"data":null}},"time_used":1799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.axendra.vip/kline","fqdn":"h5-api.axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:51.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://axendra.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"coti\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:54 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://axendra.vip\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWT7zjZS6z%2BCEHQdbl4dKhuZCtkYs2vkaRbf7PNjL84YiALqDHYAnwyEaBTsvemDAUV7tL9u2eT26%2BQXVL1dqdzHqakb4sMpdTStxONRaS3Gqw%3D%3D\"}]}\r\ncf-ray: 9d6106fe3a139a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40103,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"88e58efd7c5945c7f5988615c8d73303","sha1":"149ffeba8bcf98711466ad3e9af1bd9d9178aa44","sha256":"18deca801dd9c28c2b52278ad829d05fc85c48256dca080c92ec8bd96748b17a","sha512":"52b60a19002c7a7dc93b9a4abc7adb277db2d9927693581065eaf7d761d52d39357cfbd5b923801a8553639abdbb7c0527a1811639f62fdd5af33db99de3da8b","ssdeep":"768:jPmZkPAgzZhBz0/r+GQKWA1Pmemm3fjDOEvVRRhSdPtKILf:jPmZkPAgzxz0/r+GxbPmemifnOEvBhSd","tlshash":"e30394744f888696d63d8d8a2fb37fa1125336c74fdd4dd915bf0c0aba40262e1893a6","first_seen":"2026-03-02T14:18:34.683101Z","last_seen":"2026-03-02T14:18:34.683101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1772455846386","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.219","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:54.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1772455846386 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyJc4E-3cZa3lr-XG_fDx0cwfFe-OvbJpiTst5SgflmTQhWhFCVcmseR8LcjDlOnYT6\r\nx-goog-generation: 1745019064372382\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9740\r\nx-goog-hash: crc32c=d0/XYQ==, md5=V7VWqtqhYHeDi7LvHTUU0Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9740\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 14:00:09 GMT\r\nexpires: Mon, 02 Mar 2026 15:00:09 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:04 GMT\r\netag: \"57b556aadaa16077838bb2ef1d3514d1\"\r\ncontent-type: image/jpeg\r\nage: 1065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57b556aadaa16077838bb2ef1d3514d1","sha1":"f85a35bca10b9f1edcfa8c1697436d9569f4cd2f","sha256":"a657211e0a7d76e9c8e536f6c99e1bca3b335e42d03c857ef1615ab3f4675da5","sha512":"48bf1e4b91578de3c293203a774faab28de03c1e0cde2a734ffa867243723851614b0d52e89c6af368f470edf69dac8184c3f7b13840e38100f01ea1297fb8ff","ssdeep":"192:jvVBLKx0QCmJhGtRfIUiN99uvV6TJhDgYxBVtoBaye:xox0Zc99uN6FhD1BtJ","tlshash":"8b126a17ad41afc8fbcde36894ea1b3af363e62317ab8205402b591650cb93c480f579","first_seen":"2025-08-29T09:33:23.939266Z","last_seen":"2026-04-07T11:52:26.970303Z","times_seen":87,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":143,"dns":121,"connect":10,"send":0,"wait":20,"receive":2,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/platform/axendra/logo_144.png?2.2.1772455846386","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:41.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /platform/axendra/logo_144.png?2.2.1772455846386 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-506a5\"\r\nexpires: Wed, 01 Apr 2026 14:17:41 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUkOAvFEsISjrUTnxL3deikNoF3dpoqsayf8kYUKFuA%2BkVGfeCLAuhrD5iF0bG03VZNhikKb7PG3p%2FkOLJCONYK7cMayFRJvQK2I\"}]}\r\ncf-ray: 9d6106c2cc449a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"acc9bf2f9e58e46707e41999142af60c","sha1":"3babcd15e9b45e07665a58ad7c2677d0610badc2","sha256":"dd9f3b9975c3bc7bc75dbb5156a3f26cb7a3492de70c8aedc3aa537b6d5c0283","sha512":"f8b78232c648160a847257abe46e4b6d3603a46d58805093d0caf7a9fb33734a95dc5da6161102f419d589c4898837d61dddeb85d433f94bd82085f08f53c4f6","ssdeep":"6144:RdrSTHQjalXNX5UjE5TowU6buk18mvAW9KWclYvXfAYPoEJb58E7i:TrSTHQjaBN5FfUA184l9lclaXfBr8r","tlshash":"836423f6b2fd8f21fbaf1302f3b10e7162755b706be118a6721aca51c4196321be1d08","first_seen":"2026-02-25T17:49:59.548689Z","last_seen":"2026-06-25T16:56:23.771522Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":804,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/more.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/more.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-59b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dckyN9AQfdxT6X2tOlgD17Tn3wBWv59qc6dEk2Ynx8HEyf%2BN3WwgqUdhU%2BzRQ3LpSpTO5hmyX%2BNNbWXCQFN6Ar8Rmce%2BQtYEHrhw\"}]}\r\ncf-ray: 9d6106ee2e0f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63810c29f19cf606d16c0cf5fee50f39","sha1":"a78c6ae3bd094c40b29dba1ee1047ae74c6120d6","sha256":"f1d750f4e0385db35c7d1ab9f46537cd61986e2a58c72a49e21cdace58985ab6","sha512":"e07799ea4b257e23d17317e94bbcc7cd5c9b3c2f5893d3fbaa1e267811aa9b5e02ad2b26d224db1ba85af04d6dd5ff71fb9ce8b753bed248253271ab1513e356","ssdeep":"","tlshash":"a2218eae03c87058c116c7afe87e12f4fa6128ff5b504b5ab57c97341f46a4e8499cc2","first_seen":"2025-04-10T04:12:55.936161Z","last_seen":"2026-07-28T18:44:07.244978Z","times_seen":119,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/svg/dark/dui.svg?2.2.1772455846386","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:48.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/svg/dark/dui.svg?2.2.1772455846386 HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-940\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcTGpsc6klDgAgxMjDLX80J7Mat5vpRvm%2BvqeT95sxEdVQ7REqGaK0cIvByzk%2BDHGuJDvz1GnQhX6oSZkTeSbUZYEABNJS3RNcz9\"}]}\r\ncf-ray: 9d6106ee2e129a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fedf984d20136bd338292c02f3678abc","sha1":"28408456ad6526e0e430a6eac75418fdb287cc04","sha256":"23cf0fb591ed527fa662ad48922a235379400ebacc2668334b5f41a148fd997e","sha512":"4d30fdecfec2b773ccfa10cfaaa9fc1a28f547603570757dfa77b0cceeacbd335382a73cd5f7f9a06ff3e3a52d5e895b1f339d6f2108b3719e1526aab6d8f15d","ssdeep":"","tlshash":"834130ea13bc45b8e406839453ba796ae26531eb2480d438f6cc1b24cf230b709c64af","first_seen":"2026-02-24T16:10:35.275496Z","last_seen":"2026-06-25T16:56:23.799896Z","times_seen":65,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axendra.vip/resource/images/light/cooperative2.svg","fqdn":"axendra.vip","domain":"axendra.vip","tld":"vip"},"ip":{"addr":"172.67.156.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axendra.vip/","date":"2026-03-02T14:17:49.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:13:06 GMT","end":"Tue, 05 May 2026 22:10:42 GMT"},"fingerprint":{"sha1":"F9:54:8D:93:00:AB:FA:17:AF:AF:54:49:53:69:B9:A2:45:9B:B2:63","sha256":"59:30:8B:2C:F1:FB:BA:32:D4:79:84:BF:C2:DE:31:9A:BD:62:D2:0F:2C:B0:B1:29:77:0C:D2:9B:89:A6:A0:6F"}}},"request":{"raw":"GET /resource/images/light/cooperative2.svg HTTP/1.1\r\nHost: axendra.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 14:17:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 13:50:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5959e-84f0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwydpUbr59aNj92vPIJmnvF16pAOFhzTgHvnArZaJuJfGTIah5vXYNDYt7Jl14NeR7Vz7mzUbDGXdgWcbC5fTec4fcegO7ocC6QC\"}]}\r\ncf-ray: 9d6106f1ef029a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc6256de7476e170f90ebf32758d40a1","sha1":"3acf9122d542d0db54b5f41f5ee0294d3f20823e","sha256":"03e40a172533b8d9fc4a1eff261af639cbfe5ba5a38bacf543e5924fed4ae7e9","sha512":"e68aaaeb9754eb430b00c049a3ba8130f72f746ee099af796d7795df90e6c71b6e6472ee63e54c53b5cc19059e4ab9ea45d279f7726b292261235298edfac324","ssdeep":"768:Jfs921W6+Jr1T/s8msmsCdvPtvMW7MOKKiq2d6Y/ML0XwUwCvrD:Jk9217+x1Tk8mDsaJx7MOlx2Mmk0Lrvn","tlshash":"d1e2e078f30a1c4ed7d1a64d6725ef68bf07a52fe3acd603f908a6014187d835a790da","first_seen":"2026-02-24T16:10:35.2349Z","last_seen":"2026-06-25T16:56:23.792077Z","times_seen":65,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"axendra.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}