{"report_id":"d8d27abb-3be1-4996-af7d-b217dc724eac","version":6,"status":"done","tags":[],"date":"2026-01-24T13:42:46Z","url":{"schema":"https","addr":"app.nadodex.com","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app.nadodex.com/","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"title":"2960.005 ETHUSDT","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app.nadodex.com","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:42:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.sunx.io","ip":{"addr":"104.18.33.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2026-01-24T13:42:47.155984Z","last_seen":"2026-01-24T13:42:47.155984Z","alert_count":0,"request_count":1,"received_data":6265,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-01-18T08:11:07.692174Z","alert_count":0,"request_count":1,"received_data":82663,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"app.nadodex.com","ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-01-24T13:42:47.154525Z","last_seen":"2026-01-24T13:42:47.154525Z","alert_count":44,"request_count":11,"received_data":5735020,"sent_data":5425,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":1,"received_data":164657,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stream.binance.com","ip":{"addr":"13.112.91.197","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2017-04-01","domain_rank":283179,"first_seen":"2021-01-29T10:54:12Z","last_seen":"2026-01-23T12:48:30.272941Z","alert_count":0,"request_count":2,"received_data":480,"sent_data":1161,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.nadodex.com/","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30f392934dc6864181d5d83af2ac3c30","sha1":"b446af0194bb13eb3982117eec274bcd8b89c997","sha256":"e9e57a4e8a13a80fde606100e695a0514ac772497722ff4317f723b06479b4d3","sha512":"be068832fc14f869122c5acab9264904f5573cb05b6fff8f208ec0ebba864040ddb59d4a6b1733e3ff0a7b1d6501ef87f5093956d3e95109c7986c17182db304","ssdeep":"","tlshash":"4cb0118800a3822000b082008a0ba220e20200230802aca0bc0cc2a8af0820b0888382","size":105,"data":"","first_seen":"2026-01-14T17:34:37.706259Z","last_seen":"2026-03-26T00:46:50.274522Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ae945ff62a06bbb5db703d611fc7cb88","sha1":"80869719e8065662b8f685de0043a773387366d6","sha256":"8878946bc5806f0a66454b3accf937fb7425066e80646fd53af51777567a65f5","sha512":"4465b2605e8e9b765584ed7604e76fdb7ac623e00c2b3d27f30e06a60ff8db3a28382729f6ed2d4dcf4405dd7546bf1d49303457143d4cd47b0fec72d752ba0e","ssdeep":"768:agQi1c2rZ9t6KdEFZ096K6aVV43Yz9xZXGxz0KBqq/7tWN0ffBguc0S10Sa:NZ8IlVZWxYKD/","tlshash":"674371c6a926c4d08e6520dde533eb45e4249923cdbdf163a63cedc0785ef12886727b","size":60404,"data":"","first_seen":"2026-01-24T13:42:49.763956Z","last_seen":"2026-01-24T13:42:49.973482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lightweight-charts@4.2.1/dist/lightweight-charts.standalone.production.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee95eb36e92f7094bd17d692e41ff5ab","sha1":"ad8678fcad8673c8a866421ca0a1aefc1409f62a","sha256":"72f76147b084dbe039ea473cf83974822e587ecd9683a6af67fcfb914bd34b09","sha512":"4f3d4b198dca25e8bfa20f50759f2f7e3a7e44bc37d5b9673d764623d901d20ec43b05d81208f58fa9178ac9c0c26e6d2b96083304908212bf2ada26ee177ba6","ssdeep":"3072:hpWhrtD7bm3ivJLEFFJJLwujG44OvGmOyY0Tw1T2SVwu8QdgY:hportD3m3ivJ4FFJJtjG44sGmOyY0TW3","tlshash":"51f3c6527296f42213f1c6fa14760402f31a7589388b856cb5bdddc73c9988a72bef78","size":163500,"data":"","first_seen":"2025-09-23T01:03:26.274414Z","last_seen":"2026-07-21T03:48:57.420759Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d99fd66e9871d423b4cd6607a4f8e94","sha1":"758087e77fd87a619ae2de257c0cc558c10b2266","sha256":"6764c45c8c8c4ff89ea931918ab0fa08abcabce11265fbe4c1b2d940715e602a","sha512":"f348c9d09b8eada2b84346d4132240952fba4fbe4f3ae6b13a5aad00ac6552a31db8862d69fab6ef8ffcf8710b46305e8747148f0e7621b33f4310a04ce3a069","ssdeep":"","tlshash":"df319d651af9186d025fd31bd78a5e093c71007f310a42063e2e4bbe6fd043846af6d9","size":1525,"data":"","first_seen":"2026-01-24T13:42:49.76604Z","last_seen":"2026-03-04T13:22:08.460641Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/request-2.34.11.min.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"639793702fa1183fdf11d6aaad0c328b","sha1":"7761017f0739bb1336190628aa9bc4c643d40189","sha256":"a1c8a1092ce3c6a110dac608f31737de3ca0e168a3025e4b8fae6271f31688b0","sha512":"d6c84ab8082e8111dd30049a4942dd321ab1678f12304041efc642d43a4e4878a97aa0d35f261ea9738b81e8e31a1bf1504a1b676b3717a65e6e428c207d8c69","ssdeep":"768:tgQiFcYjZlt6K9EF4lkTG+IfX2inOJnQ1vLbEDV//U0/7NqHyfFrmQcCM9evSsM:kZBmBINO5Q1vLwDdDc","tlshash":"b15393c6a926c0d54e6910cdd573ea48e4688963ccbdf053a76cecc5b81ef16c82327b","size":63241,"data":"","first_seen":"2026-01-24T13:42:49.744305Z","last_seen":"2026-01-24T13:42:49.968611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/app.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3eef022afb038a701e4388f455f5f48","sha1":"2215b107334a1ae24afbf6e9ac60291e2a58762a","sha256":"e6f58ebb7825f2dcc43d3b78ebb183a299fd64e384808386a2346a4bbc893266","sha512":"9ba7911be2a14743d307f8f8fc1f971dc52a2a5cff650d653538fbd80446bf258026e23a68c81a0574a88a76e86abc0608dbd9324b11e17cf90e9c7ccfed349e","ssdeep":"384:Eb+LOiO5iNwieiA7V6BURRywIR9miVifVF3cJx6Cw5:TfOANNvm62jolENFoc","tlshash":"35a2a4b6a2f724364163717e1b5b5649366460073907ca883f5c87c42fe2b28c6f6bed","size":22050,"data":"","first_seen":"2026-01-24T13:42:49.754193Z","last_seen":"2026-03-04T13:22:08.459864Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/config.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d57513234298c899283442fab26975a","sha1":"75c8ee960ede1fe15732b3fe38be469af610e817","sha256":"2d034fb60eb468691af19a31f5150953487fbe5f27d5b5c614ca452fb65e5ef8","sha512":"3b575c27b73cd30e04a4fd1c5274e041d397f7beac6745518ba7cf4c1a465d70824b81231584837834542974d07885e0727d4a1b2b0108d81639b3767eb19a50","ssdeep":"","tlshash":"43f09e110fe0470b4d351080295e335eb215d0ab0e0dfc21797d87845fec267447834b","size":507,"data":"","first_seen":"2026-01-24T13:42:49.737811Z","last_seen":"2026-01-24T13:42:49.965017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/header.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"122bb80038390e9e2707653dac4d2cfd","sha1":"904275e8aac1e90dd9908e5c33b163ca396e2869","sha256":"739c55792c76fd26792c55fd7a9a10857a81da73569bd099288ff46229807376","sha512":"43df659759c84a3efb59eafef24a9133ed034ad2cf29c95cf468c6a57b92aed0801dc42ae1a687438085c60277074ff21a3e5342e1389b9438d9512213f9f1dc","ssdeep":"192:5RXEH8yn3tVSzQ62hO9wSAnCz5lhagqvbKdkPt6kfmB6:PXEHV9i3iye6P8","tlshash":"b11273aa96b32a7542af31ad47df6259373190037449da087f0dcb881fe689091f7bd8","size":9302,"data":"","first_seen":"2026-01-24T13:42:49.75177Z","last_seen":"2026-01-24T13:42:49.969532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.sunx.io/v4/dex-web/static/media/iconfont.e4bb62ac.woff2?t=175611939961","fqdn":"static.sunx.io","domain":"sunx.io","tld":"io"},"ip":{"addr":"104.18.33.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:22.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunx.io","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 17 Nov 2025 07:41:51 GMT","end":"Tue, 17 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"C3:38:CE:54:D9:B4:D4:4D:30:3E:87:D5:FD:C1:5D:B3:6F:1B:7B:DD","sha256":"02:15:41:B4:2B:BD:0E:83:80:F4:DC:16:C4:86:93:40:67:86:C2:44:55:60:85:10:8C:06:97:01:26:C4:90:C3"}}},"request":{"raw":"GET /v4/dex-web/static/media/iconfont.e4bb62ac.woff2?t=175611939961 HTTP/1.1\r\nHost: static.sunx.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://app.nadodex.com/\r\nOrigin: https://app.nadodex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5472\r\ncf-ray: 9c2ff427dadf5a0f-OSL\r\nx-amz-id-2: cp/RhvM3PGzpkO1xeycy8krmFFsOFCJ6M8VrQR893cWgWQkoWSHD65aZ1TQH3e3F7eKFHkAk79qZHP/dmYp9fM6n6mEU2YmS\r\nx-amz-request-id: 5DVCV31MXG0XV0P2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 22 Dec 2025 09:34:46 GMT\r\netag: \"1ff2f88a3520270ce105b4cff2e7081e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536009\r\ncf-cache-status: HIT\r\nage: 0\r\nexpires: Sun, 24 Jan 2027 13:42:31 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5472, version 1.0","md5":"1ff2f88a3520270ce105b4cff2e7081e","sha1":"0f4a6c2d71a09dcd074b48041e2db5277953fa7b","sha256":"ed8213188571271eea055881888de429eafbff90baf97eaba172c26617310aae","sha512":"ec3e149fcf1020b113406f88968a1de084b9be18614a750f932057da346cde67a028af18a99a227e56d685226b808efc78e7f125146dc0b7d28153496f2aba5a","ssdeep":"96:Z9apJKIKnbnRXIiuk752NSKtvaYSuTgbO8oNuHnSJDS3v1b7gQ5sK:Z9apgvbnFDD75cSKghbH+uHShS/13gQF","tlshash":"74b1aeeef806d9fcc08652a528459f54b16cbf2296e0efcf73c9c94a04f9a43609c558","first_seen":"2026-01-04T15:09:29.619522Z","last_seen":"2026-03-04T13:22:08.453852Z","times_seen":9,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":37,"dns":9,"connect":1,"send":0,"wait":156,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1m\u0026limit=500","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:22.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1m\u0026limit=500 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nOrigin: https://app.nadodex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 21366\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 06a0ca1e-58da-47cb-9cec-a28d4598b68a\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: LPH2Wv2uSDdSdBW0yzD6YMZlfNye17A4BP2nYQAxr4-m8TiLsifOsw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81738,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"14127da77e8142a6100e8a52ee02aaf9","sha1":"5f3bf29609a18b64d8bdeb94c27afd1bd5e8259a","sha256":"b9c50d81b181d42bc57472147162242d5c83318db0be89bee9b82f7d1e514883","sha512":"5dfe134d944ef259f4e4eab9ff4228ac0aebad416fa1fee91a6674fea41fc1f1c8172e8c136e8b2e55ac7755f8918a9388f1dfd73c81d649ffce0b385972e452","ssdeep":"768:fR9tGya94f1rSxKzthgf3sQ7lOKj0+Epe6zgxbbUYJNc/7NBHUDteW9tP4J7Mu65:pN1B3VQpaWp07Vo9Ov9W1","tlshash":"2e83be6d63d8876cfe398e056fd2b8e61d77701bacfe4dd0c5a0676308e19710a48792","first_seen":"2026-01-24T13:42:49.733756Z","last_seen":"2026-01-24T13:42:49.97095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":17,"dns":4,"connect":1,"send":0,"wait":246,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:42:20.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\nset-cookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213; Max-Age=31536000; Path=/; Expires=Sun, 24 Jan 2027 13:42:20 GMT; HttpOnly; Secure; SameSite=Lax\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAP8gk9tgLOg78gHnwaqDF6yvUpB1%2FwY4PDlLpHdKv0e4nd4gJUqViumGix217y1yDkg9S4jKAg5ijfdAe2YBZMyvNuAWH0KLIAJp7YaSg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ff41b1956dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265047,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (540)","md5":"32cbbbecc2d66893b9084b356980c618","sha1":"f994d77fe22c9bb5622d7d477c912a990b947d71","sha256":"a7823e752b36bd23d3c4e3256cafa120f6c456cdc1fc097797f440b5de9e651f","sha512":"c5312e0a5652652bb2a43c0a0d622e9a7dd40a7d4e9c294866971b62abc920f44f711ac51191c354ffd2a664bbab8d16589525337b27d9031b192f8fc364b6ca","ssdeep":"384:nyXG1Lswt43l4uixCQnayxmFdZ/dOlanZLuO8BWkfUzhJm5uEmrAAP3ab0Vo6nSi:nyW1gk43Lgva8U8xds9I30Z","tlshash":"0344bda038f156d1a1e6c7885c31a62a768af67bdc4e41cff34ca6d5cbf5cc1880b694","first_seen":"2026-01-24T13:42:49.735502Z","last_seen":"2026-01-24T13:42:49.967651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":73,"dns":32,"connect":1,"send":0,"wait":375,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lightweight-charts@4.2.1/dist/lightweight-charts.standalone.production.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/lightweight-charts@4.2.1/dist/lightweight-charts.standalone.production.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 52018\r\ncf-ray: 9c2ff4209d4549c5-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.1\r\nx-jsd-version-type: version\r\netag: W/\"27eae-B7KRKeiG3UnAd6R/sYFZqEDxr8I\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230176-FRA, cache-bma-essb1270063-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 105944\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1d%2Fa%2FnCx4G9pLEjcSfrfmZSod9vVJN7beNdvOGO3J3KbhH%2B4WcWGS8lFTlV6Ta66WkoSxDU%2FWF30urObiwlYRVo2OHyBHQ3nC7QuE9elmp4ViHgPRtgGNFxovti0Ey5tePk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163502,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65349)","md5":"ee95eb36e92f7094bd17d692e41ff5ab","sha1":"ad8678fcad8673c8a866421ca0a1aefc1409f62a","sha256":"72f76147b084dbe039ea473cf83974822e587ecd9683a6af67fcfb914bd34b09","sha512":"4f3d4b198dca25e8bfa20f50759f2f7e3a7e44bc37d5b9673d764623d901d20ec43b05d81208f58fa9178ac9c0c26e6d2b96083304908212bf2ada26ee177ba6","ssdeep":"3072:hpWhrtD7bm3ivJLEFFJJLwujG44OvGmOyY0Tw1T2SVwu8QdgY:hportD3m3ivJ4FFJJtjG44sGmOyY0TW3","tlshash":"51f3c6527296f42213f1c6fa14760402f31a7589388b856cb5bdddc73c9988a72bef78","first_seen":"2025-09-23T01:03:26.274414Z","last_seen":"2026-07-21T03:48:57.420759Z","times_seen":14,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":22,"receive":4,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/config.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"1fb-19beb95060c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUkEobhJo6uo29%2FL285cAKv0bGk6sXST21Gw%2FVervBJ7Kyu9oA%2FdTecMEpzmhVXVEMA%2BtjrDK5e4ck6Gv3EHQwD%2BDcn%2BjSQvygUErKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4208fbe56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2d57513234298c899283442fab26975a","sha1":"75c8ee960ede1fe15732b3fe38be469af610e817","sha256":"2d034fb60eb468691af19a31f5150953487fbe5f27d5b5c614ca452fb65e5ef8","sha512":"3b575c27b73cd30e04a4fd1c5274e041d397f7beac6745518ba7cf4c1a465d70824b81231584837834542974d07885e0727d4a1b2b0108d81639b3767eb19a50","ssdeep":"","tlshash":"43f09e110fe0470b4d351080295e335eb215d0ab0e0dfc21797d87845fec267447834b","first_seen":"2026-01-24T13:42:49.737811Z","last_seen":"2026-01-24T13:42:49.965017Z","times_seen":2,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/pages.css","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /pages.css HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"3444-19beb9505e9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fal2hvMBNNZe%2Br1K9lG%2F3Bh%2BMoXqeJNz%2BfH0zfZ31BWC3q58NhIwDtoYL28iUoxZ942hrlDFnkWC1ZsH5wWK480ap0H7khcw%2BsdQPfw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4209fc456c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13380,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"efac533bb0b95ce333efe6f63c2cfb2e","sha1":"3309efa87a5bc31e33525a1a61e1eb01da829475","sha256":"3c5f71089a3e2671b7f2a92e0b94b350e05fac61b4b3645f96b56361c3be8a0d","sha512":"b474c6297c18d4a168d61cd28da38a027604930e04d1e6b70e9adce84b9b63dc2cfced60246a3488b0c0a78d91cc3aaa97117631bef9322ca8abef79611875c0","ssdeep":"192:SxaKYVTLL6oKH6tQPJ2mY6jlsS9OnRSpkro93QlgoWwYMXLMSgHFjaWLb7cUOKNb:SctK6mNuZqNcUPNuU","tlshash":"395231969aa31a91b92bd2586ffbcb47739c9003c00dca7d7f89315c4f8d1e99462f48","first_seen":"2026-01-24T13:42:49.740607Z","last_seen":"2026-01-24T13:42:49.967049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"stream.binance.com:9443/ws/ethusdt@kline_1m","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"13.112.91.197","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:23.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /ws/ethusdt@kline_1m HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app.nadodex.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: EJPlgpHjyaIVImIEhemG8A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 24 Jan 2026 13:42:25 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: wLpOk1V3DMkLBegtsxJsxW4EfYk=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":2860,"timings":{"blocked":-1,"dns":866,"connect":1141,"send":0,"wait":280,"receive":0,"ssl":1434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"stream.binance.com:9443/ws/ethusdt@depth20","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"35.76.144.13","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:25.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /ws/ethusdt@depth20 HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app.nadodex.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KlKqE0hpRJkyHd2GyH1D0Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 24 Jan 2026 13:42:26 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: bHUQmXf/6xnW74Jo9YmiPYkIT7g=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":1134,"timings":{"blocked":3,"dns":1,"connect":278,"send":0,"wait":280,"receive":1,"ssl":571},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/request-2.34.11.min.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /request-2.34.11.min.js HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"f709-19beb9505f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BjPpsMc4Ro597bJiuSAtc5QT6OSEFj5KRjP78WJe375n4NtwgN8NI7Zyz0JR2L%2B%2BYGf7FJCes%2F7y%2FndQdYiTiZWoSzqxcv%2BkurS%2Fw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4209fc556c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (63241), with no line terminators","md5":"639793702fa1183fdf11d6aaad0c328b","sha1":"7761017f0739bb1336190628aa9bc4c643d40189","sha256":"a1c8a1092ce3c6a110dac608f31737de3ca0e168a3025e4b8fae6271f31688b0","sha512":"d6c84ab8082e8111dd30049a4942dd321ab1678f12304041efc642d43a4e4878a97aa0d35f261ea9738b81e8e31a1bf1504a1b676b3717a65e6e428c207d8c69","ssdeep":"768:tgQiFcYjZlt6K9EF4lkTG+IfX2inOJnQ1vLbEDV//U0/7NqHyfFrmQcCM9evSsM:kZBmBINO5Q1vLwDdDc","tlshash":"b15393c6a926c0d54e6910cdd573ea48e4688963ccbdf053a76cecc5b81ef16c82327b","first_seen":"2026-01-24T13:42:49.744305Z","last_seen":"2026-01-24T13:42:49.968611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/favicon.svg","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:23.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"a4b1-19beb9505de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmmRyfNqogLr1nGCul8WDV2yOunVpPB%2Fk1Dpo1HyTyrc9VYWEKPmmAom7Q7ZJhkIDdssDP41OOMZpaSfloji9M8z4dgnHn422PA4sNY%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c2ff42a683e56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42161,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e70481e21eb43c6955d77ab3606172bb","sha1":"c484b3faa7be2dacbe02746b41e66715fce82f74","sha256":"35149cd1838059affd823ac58fb8a5c19a85dc4d072aa272cefa61b906461616","sha512":"b917fb9df473d62950d53ee1173931f31b5847d2794aa13a33e79882ba85088967698ddc5e1abce76c06d614badcdb0d18a02ae612aa8aba0486d88d0881c275","ssdeep":"768:lJOV9sTjMJ0DnYdBhOq89NbzpcO5N08GEIc5WfVVqQF/Hfrh3kA:3ESjMJGu89Jt5NxWfVVDF/pZ","tlshash":"3613e0e41f29009b3641623b3e268df935ac2164f23d8685f71ed066beec4b41b6d1d7","first_seen":"2026-01-14T17:34:37.681423Z","last_seen":"2026-03-04T13:22:08.446137Z","times_seen":9,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/apple-touch-icon.png","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:23.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1890\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"762-19beb95060a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWz1vJ%2FN8hvqvBiZzfk%2F%2FtwUcYLCuVqGR8%2Fc51hh6nQ31YQrdrvcRvhtJzILdrB8bLQxZ6KipdeIzwAwf0BkgL6s8cfwA%2BO0Ynkbl8w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff42a683d56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"b9b4f64d0e801f0035027e8001ce95f0","sha1":"7cee55acdcd8178538c36ac7d03c153ed477a354","sha256":"65ad1c00bf61b7c13318a8145df3040fef00926709d1846a8fffd3465433e3c6","sha512":"7482e3cbc3d49b2d0e712cf1e8e2c5eb47612f6fc34b7f58d5a595b3fa64b003fad9f4c5434897f03551488c2daefc9aef4d8257faf2accb002aee86c826f351","ssdeep":"","tlshash":"024119f31ef0396af8f73531751190e346972244009589d6cb93f3b465827032408e55","first_seen":"2026-01-14T17:34:37.689027Z","last_seen":"2026-03-04T13:22:08.438244Z","times_seen":9,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/secureproxy?e=jscdn/getFile","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:23.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://app.nadodex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"qorc3z2j94y85sxgib3p\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6Ksc8m0LM8tK%2Fnjq5fqGEa5y5NMG301CerOht13KJf%2B6odNgxkrwLj0Ws7cPtfy0Mc1SR90u2I2j2wjYKeNxRmKcXVzrWEBZ50OScy%2F%2F4aJCA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff42e485d56c5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4256423,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9c0354e34613ef883bbfeca51649d211","sha1":"db10dfeebff96e630a1f01af6c84fee26fb9925c","sha256":"93240ff04531b6eb6ddc362c58e56afb287e20ce749542a04730be59be7cf807","sha512":"4f08f987b0826c76f90c125fd4f9c7b7e3d1fb54dd74f66076b4f3a8f88812f4ab78266eb0e97040903683d3d6fc453fd4ca1f017a2688faec2a98ca83b2ce93","ssdeep":"24576:ptsOKtglW6zK8wzgoVLtFEv5APWLW0ZgI5WpTYXJn4tv7m3J:ptsptg3F6gUxFEOWLWo59ZnCCJ","tlshash":"cd2522d77025f0927af9c6b6abe19f8c291601978dcb03720448f9d5a6de29787c0fd2","first_seen":"2026-01-24T13:42:49.749709Z","last_seen":"2026-01-24T13:42:49.969071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/header.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /header.js HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"2456-19beb9505e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mohTbVnZm9bkXdbwTq%2F2kPg1wKzkOQKNMNVLOs69lkRiXzRG7U7qw%2BfN0zU6nsaptxIgdgsMNU8iyxhJFXOtvqzh%2Bih4aWrsxQIbF0U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4208fc056c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9302,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"122bb80038390e9e2707653dac4d2cfd","sha1":"904275e8aac1e90dd9908e5c33b163ca396e2869","sha256":"739c55792c76fd26792c55fd7a9a10857a81da73569bd099288ff46229807376","sha512":"43df659759c84a3efb59eafef24a9133ed034ad2cf29c95cf468c6a57b92aed0801dc42ae1a687438085c60277074ff21a3e5342e1389b9438d9512213f9f1dc","ssdeep":"192:5RXEH8yn3tVSzQ62hO9wSAnCz5lhagqvbKdkPt6kfmB6:PXEHV9i3iye6P8","tlshash":"b11273aa96b32a7542af31ad47df6259373190037449da087f0dcb881fe689091f7bd8","first_seen":"2026-01-24T13:42:49.75177Z","last_seen":"2026-01-24T13:42:49.969532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/app.js","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"5622-19beb950609\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBeAIyzspiFttPCA6jXWDVgyvNlJrwGG5RhNgkFv%2FMfRGegYvCzxbNZlbwYFSTNO6ZEMW%2FC2OMg621sOkGuyGRsg2WUOUT%2ByOjvhDWk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4208fbf56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22050,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"a3eef022afb038a701e4388f455f5f48","sha1":"2215b107334a1ae24afbf6e9ac60291e2a58762a","sha256":"e6f58ebb7825f2dcc43d3b78ebb183a299fd64e384808386a2346a4bbc893266","sha512":"9ba7911be2a14743d307f8f8fc1f971dc52a2a5cff650d653538fbd80446bf258026e23a68c81a0574a88a76e86abc0608dbd9324b11e17cf90e9c7ccfed349e","ssdeep":"384:Eb+LOiO5iNwieiA7V6BURRywIR9miVifVF3cJx6Cw5:TfOANNvm62jolENFoc","tlshash":"35a2a4b6a2f724364163717e1b5b5649366460073907ca883f5c87c42fe2b28c6f6bed","first_seen":"2026-01-24T13:42:49.754193Z","last_seen":"2026-03-04T13:22:08.459864Z","times_seen":7,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/styles.css","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"5948-19beb9505f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WS%2FnN2xKps%2B%2BlQ3y38kHVhUxtZV%2F7%2BaMLhpJj5fJOaV1%2B2j8viUSwhckYoM2sdO3Gx65tZKASZLEf22moPig0W8uDE%2B3P5195E%2Fa8QE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4209fc156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22856,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"c8850366ba03280d0d469475f6f79983","sha1":"52d3fea8433620a3f8b8786c8ab879abb14c43c4","sha256":"1bf1481be1d2a7cd66027268e160ad845fbd7b7949d809e3e03b2580515f5961","sha512":"92fdf4af3344298ee48615e297518af8b1712283557df448290823b8e59c2eea78699f57f929f812414496d95f7e01f8c31186731b55db2b39306a4a6f21ed78","ssdeep":"192:s697dAXYyo9bvKrB09Xjrisu9TzhK8zJjWcxn3tRsDYIqZVpzqqcFXUO5PDcm1TB:Nyg77FAubkz+FhJ1mpK","tlshash":"38a26410da4618467133e3a8eff3470df7aa5027c206817e7bdda2594fb52a885a5fcc","first_seen":"2026-01-14T17:34:37.702705Z","last_seen":"2026-03-04T13:22:08.445396Z","times_seen":8,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.nadodex.com/styles11.css","fqdn":"app.nadodex.com","domain":"nadodex.com","tld":"com"},"ip":{"addr":"172.67.223.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.nadodex.com/","date":"2026-01-24T13:42:21.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadodex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:35:08 GMT","end":"Wed, 08 Apr 2026 18:35:06 GMT"},"fingerprint":{"sha1":"2D:51:5A:0C:D6:0F:3B:0D:DB:A5:43:D9:23:C8:AD:82:D1:F9:2C:C9","sha256":"78:5F:72:9C:E8:5F:80:AF:25:3C:4D:D6:4D:FB:FC:40:9B:54:DB:1C:1E:93:DA:21:11:FF:D2:B7:8C:DC:81:EE"}}},"request":{"raw":"GET /styles11.css HTTP/1.1\r\nHost: app.nadodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.nadodex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __visitor_fp=cdc4d132-8bb4-4dac-9729-db3c68fec213\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:42:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 23 Jan 2026 15:59:30 GMT\r\netag: W/\"fa894-19beb950602\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mEa%2Flgc0YMJ5LH2tq1xOX9Xl6j1%2BuycMsMungZUOzuFTDwudqW2WJjVBiUV3Zc2Ja5oVMRCNfrBIHyqqwAH3H6KKepYD2%2FhvzeznogA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff4209fc256c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026196,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"6dcccbc4e6be533966967073c303f7d3","sha1":"abef7e80adf98ea51ba6d980d9b646a52f5dbcb0","sha256":"c991c0ae2fd19a7a6710e330b3381941ba0ff0b7b6668c2abc9917b74e05a038","sha512":"95a4c9699973bab4d729471d933e8ca6bb0962ed544617b0da95371b63ecd3602dae7fe441c69ba2a7a465a34ea488ef82503e2437d6725077650cda2eef9170","ssdeep":"6144:3Fj4DGkLA4Acb5rkdvp/ku+azUcVL/845Xylyr86mBwYRYq3XhbPQKxpPbzUq6ui:TXyKmBwYRYq3X5PJsuKTuGvzYSMy","tlshash":"38259320eb17126722378f39bbe95605fb14a4238e0616bdf7c4a11c4ff95b85692f8c","first_seen":"2026-01-24T13:42:49.75925Z","last_seen":"2026-01-24T13:42:49.968105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"app.nadodex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"app.nadodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}