{"report_id":"df6f33f5-c901-48bc-8067-01eee20ab5b8","version":0,"status":"done","tags":[],"date":"2026-07-21T05:20:47Z","url":{"schema":"http","addr":"presaleremittix.com","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"title":"Bitcoin Hyper Official Website | BTC Hyper Layer 2 Presale","dom":{"size":1023149,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (565)","md5":"118e09c3953fa1cf9794e29b7224212e","sha1":"2bcacf870a060c106c80b1ee7c74bf524a584f8c","sha256":"ca73f9051f7b8aaea4aa0ee05a82eca84a2d34c93471528edee9870a7d4f6651","sha512":"79048d9e28852fa25eaeb30fc68e3b7414ef4c848341903bb81439cf15a09db31c805cb78efdc699de2471accc464612b2868ff496801cca242d25ca07f36cde","ssdeep":"12288:1ytk3VuW4vg7NL61ZRf8ZELaUDI5JePRArlITdRFv/1VaV1dyBPf8fNhL5HYbup7:xNL61Xf8dcVyINlEty5f8FhL5zp34M","tlshash":"a4256d732391223d03d7f074699bba097236857be28a8888754c55586f94a7bc3f2fdc","dom_hash":"domhash3a81bb4953e7287239d5f59f0f0b7c11","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"presaleremittix.com","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T05:20:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"zen.claims","ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-07-14T17:45:37.944325Z","alert_count":36,"request_count":12,"received_data":5048050,"sent_data":6536,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-07-19T06:13:53.934713Z","alert_count":0,"request_count":4,"received_data":53332,"sent_data":1896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"99.81.234.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-07-14T17:45:25.20991Z","alert_count":0,"request_count":4,"received_data":2574,"sent_data":2190,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"g10696554090.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":105599,"first_seen":"2021-09-02T07:59:15Z","last_seen":"2026-07-20T22:44:10.399277Z","alert_count":0,"request_count":1,"received_data":804,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-19T22:43:25.336158Z","alert_count":0,"request_count":2,"received_data":1400013,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"guard-net-d542.pages.dev","ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-07-21T05:20:59.612461Z","last_seen":"2026-07-21T05:20:59.612461Z","alert_count":0,"request_count":4,"received_data":82760,"sent_data":2342,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"presaleremittix.com","ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":91,"received_data":5555806,"sent_data":43952,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"42905dd013ab6a22358566ed675c37d2","sha1":"a7ef68901b04018401f6e9c54bb64ff0febcd005","sha256":"3df514893fbf50ab3689e9d6eaf1bc0302c71ad25620c79beb0a1ac1f496fb0e","sha512":"fd4d132ece3af3c58d84f22c27630ab75256920c323a58d509a0805851109477149f653867f1832fd6453deed8c417e1f76af29adce3ce50e4246f08388bd2d0","ssdeep":"49152:hbgoCtE7zlaHxKpLBBh+7fm8+wZ6GDBNw1x1jiZjUTWOilFZ4csl0W5kt1pNHr3d:4QeFaGRt1peK6yZ","tlshash":"5b168db173a5b065079352d814671001f239a84ab00d80ecf7ec99fb7fa99ca957bf36","size":4111032,"data":"","first_seen":"2026-07-19T14:58:51.382641Z","last_seen":"2026-07-23T05:25:55.416072Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"eval","is_inline":false,"md5":"edfb31a00d72f97c043e05f3ef7f2531","sha1":"05de4c1ffdfc0d098328541272e239473d1e4f4b","sha256":"886d0f0a65458d02d38b94f0fc347cc25957b3e7768a74060669e2dd0eb19f0a","sha512":"f1bce0777aad37a0cea7bad62e1c2921a18b0f49aceed4f8f2b6797ad85f3ca448ec247d41b3904e1187e14c1c1414766dff029d3bfcf78af0566549c3529092","ssdeep":"96:AajqexmADY5EiDslYV89WgMsGvYsUckYxmi2nK/atPjG3PGZejQOCT:Aa+er0EiDsl8gCvYsAYxmiC7G3Qej0T","tlshash":"61e12f2370dab54e01c9073e365867e5d4bad946da8ac00af388dee875ed8937e0c5f1","size":7292,"data":"","first_seen":"2026-07-21T05:21:09.506063Z","last_seen":"2026-07-21T05:21:09.506063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qrcode@1.5.3/es2022/qrcode.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fb175f14a827cd8a508964410ad97be7","sha1":"e64f2d0aaa25f25ec01b4c5303bdbe979c333845","sha256":"c14590513979baedbdd1a136d042cdc35c2ca2a6c16429b52e259e98bac80308","sha512":"e52e742a1243ed2baa2cbbbec6f60e563f436c161d05ab3b4439d2e00498872c075ce8758250da8e52e9c17ba6704018d155d6c757119dd3c546d6f12f486e0e","ssdeep":"384:G3TMj+AHdEOvOuTqUYgOPUPbU2dHFTx9yi/URJFl+BOkeL1zNC4hzV3BGqOVThMW:cOJrqP0dlTCiEJZuJVTni2YI9QY","tlshash":"5cb2e799739171ab439b5196006f4046f3fea864282d496cdb51e8c77cb8d6980fbf38","size":25531,"data":"","first_seen":"2026-07-16T10:56:13.923506Z","last_seen":"2026-07-23T05:25:55.38324Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/web3/4.0.3/web3.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1932881debf364cfed402e1d0c7a54e3","sha1":"e53d84ee93cb7c4eae82bdce939e80307b2cb1b1","sha256":"e95c1fc6aaa308b9bbfc7ba359f34b57c65e4932440416441fe7c8864ccbdd84","sha512":"da8a6b7764f6bd29008a2f9d5568ba0beb804db43560698279de9bea6b1bf49c62df786c5c06e787067db61c02aba9dd89d66fe0fe75a9aab9f2ea3d6ffc789c","ssdeep":"6144:a/e4gIKfZRWMElBbp4ppCFSnYYUoHPm9CJ3FhPyM8HMxt8gqm6fTUfX3fqwph:rEbUYYvOiF8HMXZph","tlshash":"9bd43a8476a0f0a207db60e444b70006f235b969705e44a8b7b9d8f7bda9ecd9177f38","size":637834,"data":"","first_seen":"2023-07-13T05:39:36Z","last_seen":"2026-07-23T05:25:55.405031Z","times_seen":1716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/index_1.html","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"eval","is_inline":false,"md5":"33557a3457fe4ae9155d315710d07cde","sha1":"59f7ccde3a7ee754da7be262381b9f4378a26c2a","sha256":"e2ac3aff3046736e992e1dd5169460c5ef6fbc2086548035a34352ada056ecd2","sha512":"995ea57eb1c796d7270761b65aa040721b85fcc60a2eacb4e95592bcc4473bbe3d2e0833b9659c4be0c29f6731762ed1c80ab4b418aedea0304125aef92f46fa","ssdeep":"96:yAbAZdeaSZxVZCmAIT5+SSimaSzqHaj7bWhrjbhHCid0OdCw8ExXHkM3+SG6hIPC:eZIZmITQ71Fj7KqLeXD3g6hIPKp","tlshash":"40e136233496b11a1189473e361827d6d4a6de4aea8ec50df34cdee8b4dd9a73e0c5f0","size":7096,"data":"","first_seen":"2026-07-21T05:21:09.507709Z","last_seen":"2026-07-21T05:21:09.507709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/assets/index-BNvd3EQG.js","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a8b7083d8636e1127c500ac3db9db4","sha1":"eb49062338fc3e0b0a94fa25ad30fa3820adb331","sha256":"d70712d48240383bd6ee3bb75023d53efc0fb88ca1cb9ffcd7b715f9cb12ec6c","sha512":"41284d152d9484d645860c0a346d187a8b05c470f002b631d5a903efccc95b838169bb4a57f4f530a306d3362f41b71e4185d99fde7bbd61a543b91f6d2fab73","ssdeep":"768:6EmJtKFk84cUc0L9s9upR6WXsrKZaeLaxksu/CAslP+z+OPMEmV2acv0HBQhDWM2:6Emm+P2RIp0WsJeLaxzu//SOktMv0h4w","tlshash":"c903cfe164354215028d532c395f14caecfc8f6b544d8b2af12ad171aee0ae588bfded","size":38769,"data":"","first_seen":"2026-07-19T18:15:37.17364Z","last_seen":"2026-07-23T05:25:55.38983Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-23T23:43:03.975924Z","times_seen":340516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-07-23T05:25:55.417057Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10696554090.co/gr?id=-ORtyZ4EX9WL6_BCPynV\u0026refurl=\u0026winurl=https%3A%2F%2Fpresaleremittix.com%2F","fqdn":"g10696554090.co","domain":"g10696554090.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"557e823b66d04d0f5c11b841ef2c661d","sha1":"c7f51ac61964ee96812691e47725da4c44d66b02","sha256":"0b0da5056417904856da4225a1dff25dc012a118530f86903061e7740ead7a64","sha512":"1276f0d37548a82bf7b4ed6820b06e4e30d39a02709afa1978c9669ed6807b256df484e1de6d6a358d9b9168394c4e8b5cc382bbe40d3940d379864e6144da7a","ssdeep":"","tlshash":"b1e048faf1e922117aa3550c2716d80628f39163350e11efd1e01369bdf47dcc1163ca","size":352,"data":"","first_seen":"2025-07-11T08:08:11.891862Z","last_seen":"2026-07-23T05:25:55.396096Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qrcode@1.5.3?bundle","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3c633c53c9fbe15a5c22f0b8899b6893","sha1":"7cab6abcfb791b0add36a6474a84b35480e691a7","sha256":"5edcf7ea485e644fee892456f28d1ea5e3ea88d14b618e471702eaf464a4fbfd","sha512":"49c17373f9896956be21a5d9d42a250f55c7cbd3790a219766d626344265f4ee7fcb7c93c3eb4b7f7b65dda821272439d01eadfbd87563ac92ff6b5f939cf66a","ssdeep":"","tlshash":"38c08c20403f921c003028dc292cc03063598208992022f84ba8df0c53a000090243a4","size":150,"data":"","first_seen":"2026-07-16T10:56:13.922637Z","last_seen":"2026-07-23T05:25:55.385537Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/index_1.html","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"3b658050e3face7b9f233e42cba91423","sha1":"8472a225aab4da3a0142348900db1680685bd9c2","sha256":"9f6f0e5c63606682985085f7e80aa14d817b0302dcdc6121002c7394058c685e","sha512":"f7483a65ca3b9f2b5fc31a1cad19dba3a7458980d925c115315e54b30d826967aaacfe61dd497ff2e15553f0b0cac980ef9bc90a6407d76c0a800aba90b25f84","ssdeep":"24576:0RWYLcv5+4+EszSdhPcsmWxIWU7q1km3dWL+9ALw/NVLvtTUJlkj38YBUwhTe4hy:02l9C9Fq1km388rVTUz+h7goQ","tlshash":"60c5f1994c334275669802f8685f0fcc3e686bdc9488e73a5475e0f2b7c62eb10e7976","size":2512491,"data":"","first_seen":"2026-07-19T18:15:37.282798Z","last_seen":"2026-07-23T05:25:55.419487Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/index_1.html","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-23T23:43:03.975924Z","times_seen":340516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/7616c78950.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b301660107450aacc840e878156bc1c","sha1":"3f77e17fe09f2910a0b9a00c956601475bc2f131","sha256":"70c070c7ab9aa7883a32679f765b775e94f4edba757795e2e2f505524dbc215e","sha512":"cc0e0fea6876cea2ca49eb6a4211b3e77787b81e61b321766bc521ae487cb26288aa7fd2f4fe3c8ed2fdb9dea7149074214398f902178be9eb01091951aaf9c5","ssdeep":"","tlshash":"6121c0dbba52f4401b85b7b6986f740d9767bd0adcd94428d40055c23dbeb1fd012568","size":1416,"data":"","first_seen":"2026-07-21T05:21:09.35798Z","last_seen":"2026-07-23T05:25:55.384575Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"3b658050e3face7b9f233e42cba91423","sha1":"8472a225aab4da3a0142348900db1680685bd9c2","sha256":"9f6f0e5c63606682985085f7e80aa14d817b0302dcdc6121002c7394058c685e","sha512":"f7483a65ca3b9f2b5fc31a1cad19dba3a7458980d925c115315e54b30d826967aaacfe61dd497ff2e15553f0b0cac980ef9bc90a6407d76c0a800aba90b25f84","ssdeep":"24576:0RWYLcv5+4+EszSdhPcsmWxIWU7q1km3dWL+9ALw/NVLvtTUJlkj38YBUwhTe4hy:02l9C9Fq1km388rVTUz+h7goQ","tlshash":"60c5f1994c334275669802f8685f0fcc3e686bdc9488e73a5475e0f2b7c62eb10e7976","size":2512491,"data":"","first_seen":"2026-07-19T18:15:37.282798Z","last_seen":"2026-07-23T05:25:55.419487Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"66dff3de627f03f7f40a3c5810ba051a","sha1":"19d2c57ec826a2c8068431a864de98f211d6a780","sha256":"82e5b982c275c6c1983a20cb0590ecde0ac4f82c91dd8b2f94f8fc9856245590","sha512":"d5dc0faf85a1acb5299cdb0be5ae71e5f322c886aae17b77e5f0c70f941e858afd37a53ab216bd6d5f592a1f70e23c9ee34f3d471e29cdec72b4e3692aacfb4a","ssdeep":"768:rGfGwpWgXPybGafxdbrMVaSMro78VtRC5Z/uGJIdJr+n164qwAx/c87ZZsbLHniR:ifn2EW4jfLkTZWgjLN","tlshash":"0913a66367c0ac90374baffba327b5d1e95f09de7858088bd2187d60256a71bdbc4530","size":44870,"data":"","first_seen":"2026-07-19T18:15:37.278457Z","last_seen":"2026-07-23T05:25:55.415169Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"1884ef3dcd9482d5f21c955b13eab060","sha1":"bce91cb9cb511d0cd0a19f8f0fc5bfe03f3fbabf","sha256":"938cde8b9179eff487eed4b7e1d743302676b96ee0286cc8c2e095160e147db6","sha512":"4789f3eb44aa644472d7cac096302669a0f9689166e3c20919fadf80f1e20609fb24768f66bfa1824583ef247d1b4efd4c85843f0eca753b03bd403898aa1b0c","ssdeep":"","tlshash":"25312744ac9512670e2630f808c9988557f1d8539736ea267dae91513fc0f707ef97e0","size":1466,"data":"","first_seen":"2023-06-07T22:44:52Z","last_seen":"2026-07-23T05:25:55.414397Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/index_1.html","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"42905dd013ab6a22358566ed675c37d2","sha1":"a7ef68901b04018401f6e9c54bb64ff0febcd005","sha256":"3df514893fbf50ab3689e9d6eaf1bc0302c71ad25620c79beb0a1ac1f496fb0e","sha512":"fd4d132ece3af3c58d84f22c27630ab75256920c323a58d509a0805851109477149f653867f1832fd6453deed8c417e1f76af29adce3ce50e4246f08388bd2d0","ssdeep":"49152:hbgoCtE7zlaHxKpLBBh+7fm8+wZ6GDBNw1x1jiZjUTWOilFZ4csl0W5kt1pNHr3d:4QeFaGRt1peK6yZ","tlshash":"5b168db173a5b065079352d814671001f239a84ab00d80ecf7ec99fb7fa99ca957bf36","size":4111032,"data":"","first_seen":"2026-07-19T14:58:51.382641Z","last_seen":"2026-07-23T05:25:55.416072Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"can't access property \"onmessage\", this.thread is undefined","filename":"https://presaleremittix.com/","line_number":5021,"column_number":432188},{"level":"log","text":"[safe-adapter] theme resolvemap[actor:server1.conn0.watcher16.process7//obj61 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[cfgDarkMode:map[configurable:true enumerable:true value:false writable:true] cfgDarkModeRc:map[configurable:true enumerable:true value:false writable:true] cfgDarkModeWindow:map[configurable:true enumerable:true value:map[type:undefined] writable:true] isDark:map[configurable:true enumerable:true value:false writable:true] theme:map[configurable:true enumerable:true value:light writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://presaleremittix.com/7616c78950.js line 1 \u003e Function line 3 \u003e Function","line_number":3,"column_number":28410},{"level":"log","text":"[safe-adapter] theme resolvemap[actor:server1.conn0.watcher16.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[cfgDarkMode:map[configurable:true enumerable:true value:false writable:true] cfgDarkModeRc:map[configurable:true enumerable:true value:false writable:true] cfgDarkModeWindow:map[configurable:true enumerable:true value:map[type:undefined] writable:true] isDark:map[configurable:true enumerable:true value:false writable:true] theme:map[configurable:true enumerable:true value:light writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://presaleremittix.com/7616c78950.js line 1 \u003e Function line 3 \u003e Function","line_number":3,"column_number":28410},{"level":"log","text":"[modal] qrcode loaded fromhttps://esm.sh/qrcode@1.5.3?bundle","filename":"https://presaleremittix.com/7616c78950.js line 1 \u003e Function line 3 \u003e Function","line_number":3,"column_number":58470},{"level":"log","text":"[modal] qrcode loaded fromhttps://esm.sh/qrcode@1.5.3?bundle","filename":"https://presaleremittix.com/7616c78950.js line 1 \u003e Function line 3 \u003e Function","line_number":3,"column_number":58470}]},"http":[{"url":{"schema":"https","addr":"presaleremittix.com/feature_new_3.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.723Z","timestamp":1784611211723,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_new_3.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6698\r\nLast-Modified: Tue, 14 Jul 2026 22:18:07 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59f-1a2a\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6698,"size_decoded":6959,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce1d1de046aee0b615681e0f4080a994","sha1":"a5a50b21c9f9939a0d6f95e243af479f75fd8a28","sha256":"3c99827a06d03b8e5dfa4645f0e09d046b1a1ec523aab96d869936350b25a41f","sha512":"c4176599544a4816edd077e08a47ec3cbcf8a395342ea620553df600e98961f314cee11f0c54bcfe7806a38b57268ff25d01b0aaffe328b28453e9748f4f69d7","ssdeep":"96:Fr3VY96EFvhxqoJmrz7i7zuWndlPG+r1WmtnfjcpQ7UTBIDF1Sx5wd8yl1EfdAN3:9Y66xqoJWi7zuOT1SpYiIE/VUAAN3","tlshash":"eed192f063e892f8a607f7e4dd1594a6792f38ff37d2d614c364ee84a66105948cc8d4","first_seen":"2025-09-17T02:28:10.523408Z","last_seen":"2026-07-23T05:25:55.408919Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":1446,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/runtime.0408d897d0fe853b.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.508Z","timestamp":1784611214508,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /runtime.0408d897d0fe853b.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/trackpoint-async.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:12.442Z","timestamp":1784611212442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /trackpoint-async.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":417,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/UcCo3FwrK3iLTcviYwY.woff2","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.030Z","timestamp":1784611213030,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /UcCo3FwrK3iLTcviYwY.woff2 HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 72920\r\nLast-Modified: Tue, 14 Jul 2026 22:18:14 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a6-11cd8\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72920,"size_decoded":73180,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72920, version 1.0","md5":"4b73e2ff3024784eca66d2120a9bcb22","sha1":"2870bcb8ece10145e089262bb6634d18ac85bec6","sha256":"2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa","sha512":"9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a","ssdeep":"1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH","tlshash":"f0630245820ba35ee09d4a79d27481f61fc2cb5c2bbf5c27538289ab5f57dbf6410134","first_seen":"2025-06-08T12:34:02.525952Z","last_seen":"2026-07-23T17:55:01.802055Z","times_seen":2008,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":191,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/slider-running.gif","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.470Z","timestamp":1784611213470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /slider-running.gif HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/gif\r\nContent-Length: 94162\r\nLast-Modified: Tue, 14 Jul 2026 22:18:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a2-16fd2\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94162,"size_decoded":94421,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"3c36a8f49cc9b14d8c1b2ced90aa5db5","sha1":"8bc32b06c3a9bcfc9b6eea334bae4be82e9ceba1","sha256":"3ea02e520751c4a8bcffc3110e5a17e161f60d4fbb4b8fff226738a99200215e","sha512":"ea0ed6dd29bb53c29d58fd52088f1ea41c06b3ddce5c45e49a5b49e19363e0f1bf6ce4336b85780f3ed90942b1a993e69398ffdb5d1e4915131cba15c2bd43e7","ssdeep":"1536:no8vA2hFWpgZXUnpaHVXUO4i9Q+8vAjVwRp/5ZGc3Fz2ziMtKifiZejgdj6v:nM27WoUnpaHdUOn9rjVcnJFz2ziY6ZE9","tlshash":"7d930244e05257ca2682101dbec678ce7eee6dc256f9c9ae8063f39e5c1812094f9d9b","first_seen":"2025-06-30T15:15:02.010664Z","last_seen":"2026-07-23T05:25:55.376835Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1083,"timings":{"blocked":853,"dns":0,"connect":0,"send":0,"wait":199,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.951Z","timestamp":1784611214951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4B730h5%2FhIIPe3MaD4jwVW2m3fL%2Bf%2BR1ctntDoPIa8FzlcXCwCRcqXRJJ46i5YKOymV8nvOjGXYU0YC6I7mWyAS0D1jCtzaUhvI4d5xw7ZiJ4ry4tteW9azwmZz\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e7c15d6fd2b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":662,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qrcode@1.5.3/es2022/qrcode.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:18.054Z","timestamp":1784611218054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /qrcode@1.5.3/es2022/qrcode.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/qrcode@1.5.3?bundle\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 18 Nov 2025 06:45:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Jul 2026 05:20:18 GMT\r\ncf-cache-status: HIT\r\nage: 375020\r\ncf-ray: a1e7c170dcad723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25531,"size_decoded":11941,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8512)","md5":"fb175f14a827cd8a508964410ad97be7","sha1":"e64f2d0aaa25f25ec01b4c5303bdbe979c333845","sha256":"c14590513979baedbdd1a136d042cdc35c2ca2a6c16429b52e259e98bac80308","sha512":"e52e742a1243ed2baa2cbbbec6f60e563f436c161d05ab3b4439d2e00498872c075ce8758250da8e52e9c17ba6704018d155d6c757119dd3c546d6f12f486e0e","ssdeep":"384:G3TMj+AHdEOvOuTqUYgOPUPbU2dHFTx9yi/URJFl+BOkeL1zNC4hzV3BGqOVThMW:cOJrqP0dlTCiEJZuJVTni2YI9QY","tlshash":"5cb2e799739171ab439b5196006f4046f3fea864282d496cdb51e8c77cb8d6980fbf38","first_seen":"2026-07-16T10:56:13.923506Z","last_seen":"2026-07-23T05:25:55.38324Z","times_seen":13,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/gr.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.463Z","timestamp":1784611211463,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /gr.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":718,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"99.81.234.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.032Z","timestamp":1784611214032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":3,"connect":35,"send":0,"wait":36,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-4.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.446Z","timestamp":1784611211446,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-4.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/logo.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.692Z","timestamp":1784611211692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 396824\r\nLast-Modified: Tue, 14 Jul 2026 22:18:08 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a0-60e18\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":396824,"size_decoded":397088,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68c9f5c96863e64bff1ceb51262b74c0","sha1":"57feb0648ef26e3f187ae42ed9bf858345fb8b87","sha256":"b282ea58285d187860dcdae2e94c74ddd4856c40bb7966fe91e6986e330d2289","sha512":"f7911dc0372f68906c6ac698b7b4b8c02fbc1bde662f2d6159ae5da59d7fa69fe040362cc3f5aff4f069c81da1a59ca3dc130a2bb6516549f859991e83909b10","ssdeep":"12288:QsIU6rAA8MQk0QwW7kCdvayIZ49Rjt41i:wUkATMQGOC4yxt41i","tlshash":"ee84cf68a46daf6cb7a5494cef11183eac9578dea301c6cf740f72ecd3bb594490ad20","first_seen":"2025-06-30T15:15:02.012864Z","last_seen":"2026-07-23T05:25:55.40108Z","times_seen":61,"resource_available":false,"data":null}},"time_used":2117,"timings":{"blocked":1477,"dns":0,"connect":0,"send":0,"wait":212,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/coinsult.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.698Z","timestamp":1784611211698,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /coinsult.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 10460\r\nLast-Modified: Tue, 14 Jul 2026 22:18:02 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59a-28dc\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":10460,"size_decoded":10722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42ad09d1cf47b26fc146c54780e55777","sha1":"1ff8fa6481728ba6136e6f5e6ecc1a2ab4902244","sha256":"1a7fc9826f2ec16fac2467f8b14c1d5a46bf0d5c88848e28209fef453fadcaab","sha512":"200525b7d47458f317bff92b481f7c4c32b9e232967b5fa7c5b8c1f901333540f6a8074783d3af73fe30597bedef5acac78250b27e87abe8c7ee6b543df7f530","ssdeep":"192:crNkH67Adc0ygfL0/7qMG0PfFiSSGPksNMJPtPZc8DMJ93511Rmth0K:ENkHy0ccfIyAbJ1iJPbtDGBr3e0K","tlshash":"8822d7e52399d2e4e902fba4d822a161adaf3cf5ffc583ddc150ae90766506d8d48cc1","first_seen":"2025-06-30T15:15:02.007192Z","last_seen":"2026-07-23T05:25:55.388088Z","times_seen":58,"resource_available":false,"data":null}},"time_used":2879,"timings":{"blocked":2688,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/card-black.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.703Z","timestamp":1784611211703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /card-black.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 740\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Tue, 14 Jul 2026 22:18:01 GMT\r\nETag: \"2e4-6569994837ebb\"\r\nAccept-Ranges: bytes\r\nX-Powered-By: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":740,"size_decoded":1024,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5042a9663f3ef6a815b61d12828ac2ed","sha1":"0f385e8633461760e50110238c9a5083de136091","sha256":"87b5b4e462b740e21f4b24474154658485242238b41ba431a8fbacecaddaa0e2","sha512":"03505185b38b8848cb502270dc5b86ff5bca667a566fbc4956aea4dc971d03bc09bbe2f9620f2c85504e81b3a5a5a428a553042a107640a2e038c1c7ec157157","ssdeep":"","tlshash":"6501650ae3467d33ee2e2e7236d052a3a1c307020fa51636410b258344b83a1181942d","first_seen":"2025-07-13T15:42:46.63665Z","last_seen":"2026-07-23T05:25:55.411464Z","times_seen":43,"resource_available":false,"data":null}},"time_used":3236,"timings":{"blocked":3056,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/W3P_White.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.706Z","timestamp":1784611211706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /W3P_White.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 26786\r\nLast-Modified: Tue, 14 Jul 2026 22:18:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a8-68a2\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":26786,"size_decoded":27048,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af474db9e473c491010b6c0ce313d153","sha1":"57dd64ce4ff73f3da0189c5fa64f6cc7edacd2ab","sha256":"cc6dc9edd56326d7b47ed6d43254267480b0676f86fa77ccac2cd4e2294c7eed","sha512":"173711d1b2eaa4f49f65564eb59da0871879f879aa034ab6622f2c26d2950a3cfd11e6682f575173ead14502b3130d70a52448ebf9f16f1ab4e0e9e2f5842ec0","ssdeep":"384:8AWjX04yULMjd4sJkvUIKhKffpAfad0TKCEz1h24OTAneMWZKl0+pn375kzjmR/:ZEFMjd9PIKgpAfBHExh2vTAnYOptki","tlshash":"d1c284ed6b600dd4cdc8c7c7bf1295a97a1ba13f5d65cb28c22cdba83442c5dd912e82","first_seen":"2025-07-11T08:08:11.920617Z","last_seen":"2026-07-23T05:25:55.392915Z","times_seen":63,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":3173,"dns":0,"connect":0,"send":0,"wait":204,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10696554090.co/gr?id=-ORtyZ4EX9WL6_BCPynV\u0026refurl=\u0026winurl=https%3A%2F%2Fpresaleremittix.com%2F","fqdn":"g10696554090.co","domain":"g10696554090.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.022Z","timestamp":1784611213022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 23:47:34 GMT","end":"Tue, 06 Oct 2026 00:41:06 GMT"},"fingerprint":{"sha1":"33:85:DA:27:B6:E8:23:41:7B:FC:54:07:F6:E6:0C:F7:14:8B:79:09","sha256":"20:2E:77:9F:D3:C2:12:6D:43:BA:E7:23:70:C5:CD:D1:2C:F0:B8:C4:D9:42:EA:A4:B6:AB:24:B0:98:11:19:A1"}}},"request":{"raw":"GET /gr?id=-ORtyZ4EX9WL6_BCPynV\u0026refurl=\u0026winurl=https%3A%2F%2Fpresaleremittix.com%2F HTTP/1.1\r\nHost: g10696554090.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-x/Uaxhlk7paBJpHkdyXaTETWawI\"\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: c7e6109ccfd077b9b1903dafb76c3dcb\r\ndate: Tue, 21 Jul 2026 05:20:13 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":352,"size_decoded":804,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"557e823b66d04d0f5c11b841ef2c661d","sha1":"c7f51ac61964ee96812691e47725da4c44d66b02","sha256":"0b0da5056417904856da4225a1dff25dc012a118530f86903061e7740ead7a64","sha512":"1276f0d37548a82bf7b4ed6820b06e4e30d39a02709afa1978c9669ed6807b256df484e1de6d6a358d9b9168394c4e8b5cc382bbe40d3940d379864e6144da7a","ssdeep":"","tlshash":"b1e048faf1e922117aa3550c2716d80628f39163350e11efd1e01369bdf47dcc1163ca","first_seen":"2025-07-11T08:08:11.891862Z","last_seen":"2026-07-23T05:25:55.396096Z","times_seen":12,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":58,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/7616c78950.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.507Z","timestamp":1784611214507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /7616c78950.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: text/javascript\r\nLast-Modified: Tue, 14 Jul 2026 22:17:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a56b596-588\"\r\nX-Powered-By: PleskLin\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1416,"size_decoded":903,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"5b301660107450aacc840e878156bc1c","sha1":"3f77e17fe09f2910a0b9a00c956601475bc2f131","sha256":"70c070c7ab9aa7883a32679f765b775e94f4edba757795e2e2f505524dbc215e","sha512":"cc0e0fea6876cea2ca49eb6a4211b3e77787b81e61b321766bc521ae487cb26288aa7fd2f4fe3c8ed2fdb9dea7149074214398f902178be9eb01091951aaf9c5","ssdeep":"","tlshash":"6121c0dbba52f4401b85b7b6986f740d9767bd0adcd94428d40055c23dbeb1fd012568","first_seen":"2026-07-21T05:21:09.35798Z","last_seen":"2026-07-23T05:25:55.384575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/55uqut2sqta.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.662Z","timestamp":1784611211662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /55uqut2sqta.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-1.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.430Z","timestamp":1784611211430,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-1.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":186,"send":0,"wait":195,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/usdc.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.701Z","timestamp":1784611211701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /usdc.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2177\r\nLast-Modified: Tue, 14 Jul 2026 22:18:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a8-881\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2177,"size_decoded":2437,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da551bac8162f19b104cfa97b5aa6fcb","sha1":"a1e05a8f0b3898b25624a23d3413b7b9a9f2651f","sha256":"fc7e49558f80b7563f27c8645b6310acda76fc753d995390d884365460afa700","sha512":"46d3d640881df9c305e75f93817fabbff675b8e7ea39363da9684354ea66e68bf19c6e143e910e61a87700738ddcbf8d370451c2b5e3863347515709a0f19a38","ssdeep":"","tlshash":"0e419cde6799a1d0e14be359c230612976ee24fa7b3acf444255afc3f94300e845dcd4","first_seen":"2025-07-13T15:42:46.600462Z","last_seen":"2026-07-23T05:25:55.377715Z","times_seen":42,"resource_available":false,"data":null}},"time_used":3181,"timings":{"blocked":2998,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/associate-segment.gif","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.772Z","timestamp":1784611211772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /associate-segment.gif HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Tue, 14 Jul 2026 22:17:59 GMT\r\nETag: \"2b-65699945ae3a8\"\r\nAccept-Ranges: bytes\r\nX-Powered-By: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":324,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-07-23T21:05:23.993856Z","times_seen":37794,"resource_available":true,"data":null}},"time_used":3760,"timings":{"blocked":3550,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/styles.90e68219a5ea589c.css","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.506Z","timestamp":1784611214506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /styles.90e68219a5ea589c.css HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: text/css\r\nContent-Length: 90\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Tue, 14 Jul 2026 22:18:11 GMT\r\nETag: \"4b-65699950f6900-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75,"size_decoded":422,"mime_type":"text/css","magic":"ASCII text","md5":"640718e27870e9df0c893c7c3a9fdfa6","sha1":"e0aea6e1d9d2433f4ec5a786ba1d690427357d6d","sha256":"8f8229f4c12442d6adf10b995124827c4dc1ae0165a02e3a36240d73e0da1195","sha512":"1a417862ae8029ff84a591f748a550de09ba9d8fa98708fe7235fdd8fa7f8f331662765e25aef799a4ddac894e78a85816f815a632836c6f1d91ccf8f7cd2563","ssdeep":"","tlshash":"5ea011b00e80e028c802c2b0b8a388acaa0a8028ab800a3883002a20802c023b0388b8","first_seen":"2026-02-07T19:44:06.209961Z","last_seen":"2026-07-23T05:25:55.381518Z","times_seen":20,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:18.117Z","timestamp":1784611218117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: a3583080a3b3bb7337d1803178581389\r\nContent-Length: 1316\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfmFen%2BSsOZzYnCSJYbJZABME0Mtt84NB27xhx0fvVwB3COyhg5hjQDCMamnoYWX5w6cuugJWN6foj6jd2vlwbw21u61PFjH%2FrI52tvjNdkldY7Qf9LP6PKwcAEc\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1e7c171783bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":959,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a070e224aa13a80760a0212791280c05","sha1":"646ec2f11aee3d5acba5d71a3db6f25bc067b0e4","sha256":"bdb884437f51c71ee33f70f703b26c441a7b842a731f57816a545ef21c8e2bc1","sha512":"1f22f3e788c6e780b1c3fbff69ebf2dfc0ebcf18e593824f5fdcce617f504c1f88b03c79e27a4cfe2b089aa24c1cb1a8e9789bb4b027b34cd0d7fa15d61c915f","ssdeep":"","tlshash":"4ad0eb3a0fae84141aa07291c3c0aaaa02eed702a06a0923ad0c36e0208280da8448f5","first_seen":"2026-07-21T05:21:09.36472Z","last_seen":"2026-07-21T05:21:09.36472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/_","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.455Z","timestamp":1784611211455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /_ HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/fbevents.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.460Z","timestamp":1784611211460,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /fbevents.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":859,"timings":{"blocked":677,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-9.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.439Z","timestamp":1784611211439,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-9.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":181,"send":0,"wait":189,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/core_js.min.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.686Z","timestamp":1784611211686,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /core_js.min.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":1116,"timings":{"blocked":889,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/main-2PU5FJMH.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.718Z","timestamp":1784611211718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /main-2PU5FJMH.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.852Z","timestamp":1784611214852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"LLqcQJx9bJ4W_gISvklY\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c68sgC1x7oL4%2F7M80Iq8jmPFTws18B%2BwdMl65YdqbxZs4tf%2Bclgr0A23jXdYG33icaUQl%2BdZxXBllDagWsh8FKU6g3m5GP6SWwG98CUuAJNktcbjlTl62JgD0rvB\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1e7c15d1fd0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7104,"size_decoded":3351,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8b2ab97e051738e13d9c8287f2c209d7","sha1":"a6f9dae35da498e62c858e280615f56118e49c2a","sha256":"bf1a81dc745242fed7b90d336b211830a10188bd7993eee063c75bf40d8fbdc0","sha512":"f74cc09de7839f96ec7c09bce7830476b8b8ef7199845e83a1fce9f1af05e0431bcf1324d2d3eb68eed91dc476eaef5dff4fc4d6aae3d213e65467182a4ce5d5","ssdeep":"96:KrAbAZdeaSZxVZCmAIT5+SSimaSzqHaj7bWhrjbhHCid0OdCw8ExXHkM3+SG6hIZ:IZIZmITQ71Fj7KqLeXD3g6hIPK2","tlshash":"9ee136233496b11a1189473e361827d2d4a6de4aea8ec50df34cdee8b4dd9a73e0c5f0","first_seen":"2026-07-21T05:21:09.366411Z","last_seen":"2026-07-21T05:21:09.366411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.854Z","timestamp":1784611214854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJFCsuyXQH9SzThwyhEq5Iyuv%2Bex8waG6KB4vHXKUKqDuhTEUKGddZmCZOkWI%2BTqHgOpLkuiLn772oBBcqGjZ3%2BSxXAg%2F3N8UaJZ3sTWELwBbx1yoXZGUq1YoemS\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e7c15cdfc9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/slide-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.421Z","timestamp":1784611213421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /slide-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 252824\r\nLast-Modified: Tue, 14 Jul 2026 22:18:09 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a1-3db98\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":252824,"size_decoded":253085,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d72f7bb7c6afad999d475ac168e3dab","sha1":"e7c5ff73a2b893bd048472044ddae652cd29e1dc","sha256":"249c547e93fdbc44f19dc33ba688ba30a5a0e9ad051c91a8b5a71e18944b6859","sha512":"11c5bb6586cf2fe173748d0af243a56a754b0fd7535df6b568e2c59e83d4e9e769876a2a858286c7a29b2a6d3a8f80cbb65989ed05e575b13b8d2e5d7d3dbbb4","ssdeep":"6144:+rJeLHp/cQzS2BNpOVcLCFWxSRwmIsXvpCLThapA:+rJeDz30VsCFWSQsXvpclapA","tlshash":"2c3423e93a32a7357c21f32ddb57678b500613c0d7fafd6aed5c48134aa3d1029a62c6","first_seen":"2025-08-27T13:42:44.850949Z","last_seen":"2026-07-23T05:25:55.409965Z","times_seen":42,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":344,"dns":0,"connect":0,"send":0,"wait":249,"receive":575,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/faq-box-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.439Z","timestamp":1784611213439,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /faq-box-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11538\r\nLast-Modified: Tue, 14 Jul 2026 22:18:03 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59b-2d12\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11538,"size_decoded":11797,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ec2f69bd81d7934021b3418e3dc4eb5","sha1":"5031cfbb166f663f1a82bf6ff7b37fc651513409","sha256":"d9c6b5f6a09f0c3a83007151cbafe2844c49e9d13d146a244da71384652850b1","sha512":"1885f59459e9fe80255ce40da4405b2270a83da351b24d9ed3d07b87c2555e18f1e65839c45fb9d234a1d579ca9c46dba43aae1f3e6e3418f8e0a4ec99b7b0c0","ssdeep":"192:wwZDGNHNeKxfQO0YFlVcwlyd3oKvLu0K4EUdpeB6KF2TMO67cgiQXxEnIpngqM5x:ww9GyKJQO0YZUR+Xd5BNFGD679lBEnMO","tlshash":"1232c0599564107dcac16a38f83017c7fe3ed4b1556b268fea0610b22700fc6de94fad","first_seen":"2025-06-30T15:15:02.005084Z","last_seen":"2026-07-23T05:25:55.399734Z","times_seen":61,"resource_available":false,"data":null}},"time_used":2086,"timings":{"blocked":1865,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-6.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.453Z","timestamp":1784611211453,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-6.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/gtm.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.464Z","timestamp":1784611211464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /gtm.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":768,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/web3/4.0.3/web3.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.659Z","timestamp":1784611211659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/web3/4.0.3/web3.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 05:20:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 147285\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 11 Jul 2023 16:37:40 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBze1TkEBHtgINQmQsZBOoAekOQkMrWPLjj16njS8nhskmU2N%2F12RoTw%2By26eSUCvw6zup61YTQngGTBhfsHj4aTOEXxqLO6j9HqZfSBgN2ngoHeCKtZ2v2oGUvcHaIFFwqZrm75\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1e7c148f99db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637834,"size_decoded":148289,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"1932881debf364cfed402e1d0c7a54e3","sha1":"e53d84ee93cb7c4eae82bdce939e80307b2cb1b1","sha256":"e95c1fc6aaa308b9bbfc7ba359f34b57c65e4932440416441fe7c8864ccbdd84","sha512":"da8a6b7764f6bd29008a2f9d5568ba0beb804db43560698279de9bea6b1bf49c62df786c5c06e787067db61c02aba9dd89d66fe0fe75a9aab9f2ea3d6ffc789c","ssdeep":"6144:a/e4gIKfZRWMElBbp4ppCFSnYYUoHPm9CJ3FhPyM8HMxt8gqm6fTUfX3fqwph:rEbUYYvOiF8HMXZph","tlshash":"9bd43a8476a0f0a207db60e444b70006f235b969705e44a8b7b9d8f7bda9ecd9177f38","first_seen":"2023-07-13T05:39:36Z","last_seen":"2026-07-23T05:25:55.405031Z","times_seen":1716,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/follow-x.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.696Z","timestamp":1784611211696,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /follow-x.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 314616\r\nLast-Modified: Tue, 14 Jul 2026 22:18:07 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59f-4ccf8\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":314616,"size_decoded":314880,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a80dd618fe1b10ac97137a272a19b9fb","sha1":"686e73e4208922dfaa6786251721fa55645e085d","sha256":"1a27b3876a6366817f46ef5b8ee9d7a18a434c6b937b12d769c99f4c4b3a52fe","sha512":"8dbd34c583e7e223ad33f874b6c9da563c8fa240592597e43b025e5bc3dec77295fa875a937036a62d7936fc2994ea1b58eb660679c3cb4daa09b00a722f4c00","ssdeep":"6144:d8RREiH5eD+8VfXuZFLYWlTwXnPYzLEjZG8NqmEaKCuyxiTCz5tN795:dwHQZfXeLYW1mP4EZg/JyHDH","tlshash":"78646c2e1d4cbb8e37321c6fcb07117e2e8a29ddb28591cf29af76edd3560548160da1","first_seen":"2026-01-21T02:38:48.680866Z","last_seen":"2026-07-23T05:25:55.403214Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2412,"timings":{"blocked":1476,"dns":0,"connect":0,"send":0,"wait":266,"receive":670,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_6.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.712Z","timestamp":1784611211712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_6.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3886\r\nLast-Modified: Tue, 14 Jul 2026 22:18:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59e-f2e\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3886,"size_decoded":4146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d78485fdb6e5df1117dfda24b0e4dc63","sha1":"5c834f1c4aaf4bc3ad08f649b52f4dc7edf67584","sha256":"a322f866ef921bf1a7b255d9cb0d7d1b0bd9c794d27802bf3fc44b16ea050d35","sha512":"f1428d0221027646c12e6d48cff9c3f5240ea75effea1a547242b86980c954589c47c7620a46b1eb3ad18ac19ddad1cd0fcb2317fe16676a8e80da7b025924a3","ssdeep":"","tlshash":"5481a4d4335943f0d90d77ecc90aa8347b2338faea75eb8c86912e4a310206d5d58cd6","first_seen":"2025-06-30T15:15:02.009356Z","last_seen":"2026-07-23T05:25:55.382413Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3578,"timings":{"blocked":3391,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/index_1.html","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.395Z","timestamp":1784611213395,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 14 Jul 2026 22:18:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a56b5a0-90e2\"\r\nX-Powered-By: PleskLin\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37090,"size_decoded":9593,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (36468), with CRLF line terminators","md5":"95cc5ed293cd7acdf3ab850f5ebef91a","sha1":"5919e58320c28973d4d498a3dd6a99b51059ebee","sha256":"7182fbcd679ce715228db39d52f214d5479c95854c7151edabfa5f63047fc972","sha512":"7280db27de20e2bdcafaa6531cb811e19de91c30883df36f9a19a1254a4f3bcc581b1c136511d37afce06fe268d3775a281878ac27a8c1728837808c2761ae61","ssdeep":"384:Gcl+NWiwv2SwvvHQGo6ogAeaa3pp5CB3ObXdG9jS0glHwnw:GcmW3v2S6wRUAePLoB2XdG9jSRlHV","tlshash":"30f2feb72402130d6a77cc952269324de963d19f9dfab5bfc2146a20a1443af47d02ef","first_seen":"2026-07-21T05:21:09.381355Z","last_seen":"2026-07-23T05:25:55.39406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":916,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T05:20:10.342Z","timestamp":1784611210342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:10 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 14 Jul 2026 22:17:55 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a56b593-fb38b\"\r\nX-Powered-By: PleskLin\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1029003,"size_decoded":222664,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8e33f56e7d8f7d5144e471f5afb52a2f","sha1":"cb416bec2987c0b8d161e2c8f7bc85210ecc74b2","sha256":"f1505349d370030efb135e824c571ab8600dcd3ad155f11d6dfee703209f8fc0","sha512":"833a528bf521279558373e867cca24c1204f941fefed9ddf03cea377c7bf5a3e50c2335fbd1f14d569b4d81d03064798b82a709349027301c2beab7f6c3764bc","ssdeep":"12288:qeFpFRs3NL61ZRf8ZELaUDI5JePRArlITdRFv/1VaV7dyBPf8fzhL5HYbop34Tap:+NL61Xf8dcVyINlEjy5f8LhL53p34y","tlshash":"c4254c726380223d02b7f0646d9bba1df336857ba2868488755c55582fb4a77c2f2fdc","first_seen":"2026-07-21T05:21:09.384349Z","last_seen":"2026-07-23T05:25:55.383736Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1366,"timings":{"blocked":-1,"dns":11,"connect":172,"send":0,"wait":343,"receive":493,"ssl":347},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/_-1","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.456Z","timestamp":1784611211456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /_-1 HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_4.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.710Z","timestamp":1784611211710,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_4.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7329\r\nLast-Modified: Tue, 14 Jul 2026 22:18:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59d-1ca1\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7329,"size_decoded":7590,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d4d30e1bb4e26b0763db67c25926b6d","sha1":"5d76ee9fc5ae897ae11c91758fbf679ca1d9f923","sha256":"7035958802b9fc233c8565413e0e39a92ed7e81a149c5e5c2b89e0f689f10c0b","sha512":"bf3d478851b7db53cadc9304f6ea2e7948eebf60dcc9e1f66e4ca63fc106c95348c7e78bfe9863ea7760c2414641421388f144cc6b256d7292b407160680b636","ssdeep":"192:Z8x0YGmxOjxkWOd0rU4E/2sPyd5Z17FOuciYVhn9:yxAmxmxkWs0g4VT37gmYLn9","tlshash":"4de173ee37d471f4d543f3f9cc1246b67a1e2cfab3518758c7581e06728a06a4989cd4","first_seen":"2025-06-30T15:15:02.016125Z","last_seen":"2026-07-23T05:25:55.392052Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3447,"timings":{"blocked":3257,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:17.977Z","timestamp":1784611217977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: a3583080a3b3bb7337d1803178581389\r\nContent-Length: 1316\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bD98ib5Z93IKGDcOMNMy9ljgi3ZDaVzjIpWFCYdgwS8RjBLQrt8zaPpOEzoC3qJWYlqAMU8bQ5kebKkJ1KC%2FTiIjx2rOq5PqtAu5JH1hojW7Ni8HJ5FemJRbfKn2\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1e7c1709837b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":957,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b424f9c107580c8905eef118170671d","sha1":"93d1ebafe1a7161c0feb991a63a941e4a3c715e7","sha256":"56dc8b807609e5e2ed15c31a5f8e68d0873af3cf95c96144d715a1e9d0833b70","sha512":"32c14c88f142bc107e418cb14b87e9f10a5ea194fa75d0b055ed38fc2a68c7e463538864c7e9b418c785ef47a1274b49dc9ebf602543779fe7e5c6565bf998c5","ssdeep":"","tlshash":"4dd0e78cf7900b92e8553309033047d194310c01c24d40b128d488515bfe3655c62405","first_seen":"2026-07-21T05:21:09.404113Z","last_seen":"2026-07-21T05:21:09.404113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.442Z","timestamp":1784611211442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/bsc-black.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.705Z","timestamp":1784611211705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /bsc-black.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1842\r\nLast-Modified: Tue, 14 Jul 2026 22:18:00 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b598-732\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1842,"size_decoded":2099,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e96444119cca578264ca9366fa3ec06a","sha1":"e82bf88f735b747458d9dbde466066a21a6013bd","sha256":"c3434cbea3a86d294bdbe072a80060aee8bfd0ebdb2e30b7a731a4244017298b","sha512":"1166ad7070a4b4e4a00a631758a5aac6524a445c228c6802b050b8beb0fce0659958ec9bd589fea862e3f066271acd1227403393c1ab79c808bcc7a1ca225fb4","ssdeep":"","tlshash":"35311988e154858bcf14f9017bd7b34c6326c88e859bf88bc4a1aeb541bd4f831334a1","first_seen":"2025-07-13T15:42:46.577395Z","last_seen":"2026-07-23T05:25:55.406247Z","times_seen":43,"resource_available":false,"data":null}},"time_used":3258,"timings":{"blocked":3069,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_7.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.713Z","timestamp":1784611211713,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_7.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 14460\r\nLast-Modified: Tue, 14 Jul 2026 22:18:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59e-387c\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14460,"size_decoded":14722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d466dc276e1d09ebd8cf5f41d0fd883","sha1":"d6e5774dded4670fe955ec3ec62f71004d8cbef4","sha256":"5d5325c800205a12be35151df6ec88b9428c2962f40226842d3dea8c3e1f62b4","sha512":"1d70b8f8ce2686dad700b640cbf8cb6425a1e647decf5e6a958a5d981261883f76aea5ece94e281e9a21e0e9a8d61f24c88ada0237fa8d8c7ac462f10e667f47","ssdeep":"384:6IHfty41ArPEXVIX9ff1eyUF+j/ZQzmc6gOc1KX1wcX:yrPFX91eN2/+yVgOUaX","tlshash":"1c52b6fa6b9475f8b443e7e9dd1388a8b50f38fb3f95a798c258de4465500ac8cc8c90","first_seen":"2025-06-30T15:15:01.985262Z","last_seen":"2026-07-23T05:25:55.366574Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3584,"timings":{"blocked":3399,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_3.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.709Z","timestamp":1784611211709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_3.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 8480\r\nLast-Modified: Tue, 14 Jul 2026 22:18:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59d-2120\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8480,"size_decoded":8738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a292e391e4dd6863b713a26046b7a639","sha1":"0f67691bb8665539b965f8f80d9b00f9bfb02c52","sha256":"357290b7a03fd31e8e60b6bc79aa06fbee7d255ac103d67574b14de59a284f50","sha512":"962a1af7ead4a3b49efd45686a54efef152586054b894140eb89ec38ebce591d17159b874ed132b91e7094959f6c344c43ce3d74a2c119e40c12a9e08d7b429a","ssdeep":"192:oeLRSZTxClijwlqGVwfSfqjPy21YjtU4fG0EVgjmet+G//E:nu5kOP1Y55uVVIme4","tlshash":"3902c0b4a3a8c8808cd1d9d66319537839c85dc790fd48f2ae422d7cb6e626594cb98e","first_seen":"2025-07-13T15:42:46.591062Z","last_seen":"2026-07-23T05:25:55.374008Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3420,"timings":{"blocked":3235,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-10.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.452Z","timestamp":1784611211452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-10.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":489,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/sol-black.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.700Z","timestamp":1784611211700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /sol-black.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 888\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Tue, 14 Jul 2026 22:18:10 GMT\r\nETag: \"378-656999503d7e8\"\r\nAccept-Ranges: bytes\r\nX-Powered-By: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":888,"size_decoded":1172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07ca8b1115fa934dbedff8c173ac026d","sha1":"a691b9263dc62ad043f2f641f02a78f61788b983","sha256":"e7e67fc7770161e8f07db88a817ef8cbfc24dcc839655d7331eca726012a811f","sha512":"277af5a244094ee81223626ca8245c3cc77ab21c21cacc5fbeea785e2eb40cd69a4d9466555da706fb4b86dde5aba44f3a2413eca766f83d694d37e3ca0efe70","ssdeep":"","tlshash":"c6116319a580b452ea999c205311cabc254b2b0c4655f70ef5ac3c75124fe1aeaf0fd3","first_seen":"2025-07-13T15:42:46.606498Z","last_seen":"2026-07-23T05:25:55.375455Z","times_seen":47,"resource_available":false,"data":null}},"time_used":3173,"timings":{"blocked":2990,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/favicon.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:15.814Z","timestamp":1784611215814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 405925\r\nLast-Modified: Tue, 14 Jul 2026 22:18:04 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59c-631a5\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":405925,"size_decoded":406189,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a50f854da41184fe1433f5bf880c85d","sha1":"b790cb7936ea271f9b0a152270c53854ac0e7853","sha256":"a13f87dd0d18ff5cfa0977bb74829ceaefe297ea0350da3f2b802bfbcc35a145","sha512":"8a43e0f87f8fdca09f82f278d93e47b182f5b0b3982ef58ed0b5ab166f705f4ac0d90627972708b2098ca64f2b42b1a02b3d02c4a91eed9eb539f860c589e9cd","ssdeep":"6144:861/yojA4tpaSxbZ0oimAUkOg+L7akbIC1rHxKLfPR20sL9u5FgAjbeo2pdilt:/1/5fnaSxbZcmAUkOgCb7caLMDgfp0lt","tlshash":"3a848d26494e2bae7a779d1dcf06583f2d5124dda284c5cf7c8ea2f9d36b4148a2cc70","first_seen":"2025-06-30T15:15:02.014806Z","last_seen":"2026-07-23T05:25:55.365519Z","times_seen":51,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qrcode@1.5.3?bundle","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:16.581Z","timestamp":1784611216581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /qrcode@1.5.3?bundle HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /qrcode@1.5.3/es2022/qrcode.bundle.mjs\r\nx-typescript-types: https://esm.sh/@types/qrcode@~1.5.6/index.d.ts\r\ndate: Tue, 21 Jul 2026 05:20:16 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 21 Jul 2026 05:20:16 GMT\r\ncf-ray: a1e7c167ec52723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":662,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3c633c53c9fbe15a5c22f0b8899b6893","sha1":"7cab6abcfb791b0add36a6474a84b35480e691a7","sha256":"5edcf7ea485e644fee892456f28d1ea5e3ea88d14b618e471702eaf464a4fbfd","sha512":"49c17373f9896956be21a5d9d42a250f55c7cbd3790a219766d626344265f4ee7fcb7c93c3eb4b7f7b65dda821272439d01eadfbd87563ac92ff6b5f939cf66a","ssdeep":"","tlshash":"38c08c20403f921c003028dc292cc03063598208992022f84ba8df0c53a000090243a4","first_seen":"2026-07-16T10:56:13.922637Z","last_seen":"2026-07-23T05:25:55.385537Z","times_seen":13,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":34,"connect":8,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/follow-telegram.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.697Z","timestamp":1784611211697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /follow-telegram.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 871\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Tue, 14 Jul 2026 22:18:07 GMT\r\nETag: \"367-6569994dc88e2\"\r\nAccept-Ranges: bytes\r\nX-Powered-By: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":871,"size_decoded":1158,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b2c0c10065844448c42c1955e4b7fcd","sha1":"e95a49acebbed01283197ec9c62150a6ee33ede5","sha256":"b1deaaf04404e13c013c2f60b8c6263541ad99c316e55b1a80fe46aeb92383fa","sha512":"3a65a14b805b694ad4b9ebfc98abc381ce0fe558b5f0c4824bee2864dd4fe877dd49148ab0ba5165978456551210214852e927deafb3d518a3a5f22f6d359de0","ssdeep":"","tlshash":"1911eff5727cf1e8e04a9712e5334481568b79ffe7c48398ab82aee4e3172d5c854e40","first_seen":"2026-01-21T02:38:48.612244Z","last_seen":"2026-07-23T05:25:55.372015Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2819,"timings":{"blocked":2635,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/_-2","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.458Z","timestamp":1784611211458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /_-2 HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":585,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/usdt.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.702Z","timestamp":1784611211702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /usdt.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1596\r\nLast-Modified: Tue, 14 Jul 2026 22:18:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a8-63c\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1596,"size_decoded":1856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e94a7c643b6ece23ba1eeb9f0c40075","sha1":"1dd9f45b2a7220d50263936f107b20f7eba2b0f9","sha256":"091a2236a925113ea90627521bac1a4f53e20e2c04d8bc0bfd24ac02f97f1a65","sha512":"6240148782b2c5ae1b65fa089af8d723b24fc9b5e151b170075e8da40814e00b5eb6497abfed9404cc367b9daea24b5a0389f44fb3fdef28431ac88e8aae4245","ssdeep":"","tlshash":"c33153e05ecd3132610df76c4efba8f27af315e57644ae1582006a3260118cb1c5daab","first_seen":"2025-07-13T15:42:46.562924Z","last_seen":"2026-07-23T05:25:55.410944Z","times_seen":43,"resource_available":false,"data":null}},"time_used":3222,"timings":{"blocked":3029,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/500022.min.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.765Z","timestamp":1784611211765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /500022.min.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":1216,"timings":{"blocked":1035,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/500022.min.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.774Z","timestamp":1784611213774,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /500022.min.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-5.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.434Z","timestamp":1784611211434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-5.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":186,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/union.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.429Z","timestamp":1784611213429,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /union.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 5292\r\nLast-Modified: Tue, 14 Jul 2026 22:18:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a8-14ac\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5292,"size_decoded":5550,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c74ec3b620336dc2873f8a1d50b0bb62","sha1":"1f778cd2ac7157f7f7646b6e44bb1599978d46b2","sha256":"10a1935fc82680eca7c59fb241c75dee5ef937fd92acab0017a723bbd59ca897","sha512":"01636316748e00b9b7d79fd222a70c6120f51962f8cbe79fd23e9e33a5b600cc8b42f960e624048f5e41776fb16fe40a70c4a0150e59d25935348ecafd9b8b27","ssdeep":"96:txXXfOAi5R2gbDq8mTQ8MzYekjT/FTGKjYlbKCnMrBGGG4+QkDRzbRCQVmRZP6:DXXf05Igi8cZMzMT9bUEkDRzVky","tlshash":"30b14a938dc41d12447236f04e46869f2bfdbd40b92edfae6661f772b0a493242ed431","first_seen":"2025-07-13T15:42:46.615186Z","last_seen":"2026-07-23T05:25:55.398413Z","times_seen":44,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":669,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/bitcoin-layer-card-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.432Z","timestamp":1784611213432,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /bitcoin-layer-card-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3542\r\nLast-Modified: Tue, 14 Jul 2026 22:18:00 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b598-dd6\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3542,"size_decoded":3799,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x420, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8a0ad1a29a8222233edc9d3f766542c","sha1":"8969636b797d9f4cb5c1195aceb458a9399443b0","sha256":"db5793fc7274fe950c08b56e810d2f171f5d63a00f55134230b58d05fba2d8b4","sha512":"97c0c3f5f4489b37142255961d6fcce4abadf5cbb6b876c7a7615d425618e611077280b512cf857293992d020b346799b8afd9d3ec666b589650ded69966f4ff","ssdeep":"","tlshash":"b4713cbbfd6451421c2ab19f8c367f61ef8bb195f81d5c751c087cea866be84b470501","first_seen":"2025-06-30T15:15:02.020789Z","last_seen":"2026-07-23T05:25:55.39895Z","times_seen":66,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":692,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/main.dbb364f5c5086c21.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.511Z","timestamp":1784611214511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /main.dbb364f5c5086c21.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:15.109Z","timestamp":1784611215109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:15 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDVHuqO2751QBJTtCFtT1c3afz3YrGGQmpzVrt%2F%2Ft7fOWKYwpL0GXhZ0SP739nvxbevWwwXvPQ1LhOZIPcF%2Bf%2FTG3VaR4EloHD4cKegEGQty9h%2FM3XXeRxXOPKaL\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e7c15e6fdab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.399Z","timestamp":1784611213399,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: text/html\r\nConnection: keep-alive\r\nX-Accel-Version: 0.01\r\nLast-Modified: Tue, 14 Jul 2026 22:17:55 GMT\r\nETag: \"fb38b-65699942782a1-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":316,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/widget-bg-top.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.427Z","timestamp":1784611213427,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /widget-bg-top.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11238\r\nLast-Modified: Tue, 14 Jul 2026 22:18:17 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a9-2be6\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11238,"size_decoded":11497,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4eed43d91c38a4205f7ea68540bf76c7","sha1":"02f85099551971664d40fd6b3f7cf9b823f3818c","sha256":"b191b2f218b09c1f7bc62089f2fd96df07593e3b2a1cc373506bd520d27e87d8","sha512":"7c332cf1b3038146b99cfe4c97538847703f75b27a24686ab66f2a988c60bc15299d1af1da83240d6e804504960ef9426339eb33a4efd8de52cb2a9b3df53927","ssdeep":"192:tntC2wXy2P3lDvaNMuTvTseFl6XWrsvgRC+zhsCS4c+HsaQ3+hr/cm:J0jy2P3tCvvxTAx+iB+Xhr/cm","tlshash":"3332af7806ef043fcad253583cf78887d657440a1d829e096232e6de246b9b6d7b3ce5","first_seen":"2025-07-13T15:42:46.685518Z","last_seen":"2026-07-23T05:25:55.37254Z","times_seen":44,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/widget-bg-bottom.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.428Z","timestamp":1784611213428,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /widget-bg-bottom.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4370\r\nLast-Modified: Tue, 14 Jul 2026 22:18:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a8-1112\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4370,"size_decoded":4628,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de89fd84db48ea5c26aaa29ae5b84dec","sha1":"d6e190327da9394fc3756050d1fba66036726073","sha256":"2e329d4180a2ab2ff24da89653c9da4bd061b23a8232bf8ca691921c913b0b71","sha512":"86d8616828535bef21c4f819c025689f85ed7775cb28c515bb2bcdd41f1e7c973a1ad8ad427c2b8e1054c0649d97f3967417de36e9b4c166ff2f986451199c56","ssdeep":"96:ryje6fs2BW5OCJtW4444YGT8Rri0lmdlqe45QkWov:rue6fs2Y9tZ1iymdlN4mgv","tlshash":"b491185d68318085cbadaf7b72e04ff32e4d1b1f8a7a206c759092bb44ac18c5f1e54e","first_seen":"2025-07-13T15:42:46.573249Z","last_seen":"2026-07-23T05:25:55.386007Z","times_seen":44,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":487,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/step4-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.434Z","timestamp":1784611213434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /step4-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2174\r\nLast-Modified: Tue, 14 Jul 2026 22:18:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a2-87e\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2174,"size_decoded":2431,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3143168669899b9588f74895362b646","sha1":"26e2c368f8d07b345e6620167f828d4a57edbc74","sha256":"4f1adbd0e2adcc0cd6c35438a0ece16a92b557e62b192bcddf83942f2122c6a8","sha512":"18095fff6a3000d6471a95b0e45c998c7bf3954ff1828513fcd2617f92f264c977b0a4654f482a0d0301c2c5272d846687bb5f53fbae553e299479488ee6a3e0","ssdeep":"","tlshash":"d4416c30f33de7adea319abc3b063739db9cbe33129e989c4282200a0b2405d4e00042","first_seen":"2025-06-30T15:15:01.994988Z","last_seen":"2026-07-23T05:25:55.39703Z","times_seen":58,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":772,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/tokenomics.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.437Z","timestamp":1784611213437,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /tokenomics.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 18940\r\nLast-Modified: Tue, 14 Jul 2026 22:18:12 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a4-49fc\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18940,"size_decoded":19199,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f222f25d27821cca4bd242ae26bb48ca","sha1":"278f60d543832a07d36aae84191e7f1fb7da878b","sha256":"8a653d07617beaaaa570e0d9e12c1927a91d2a2cc0f10d27078e229c2f72fa4e","sha512":"f4387ad1cfc222a6a35f9c46b0511d06bedff2e1875a7e4ab74281b52623a8fc934bdcee5aa97c214ecedcf1014beb7709c4f2e3ca2f461903df914775791658","ssdeep":"384:vldNpzwjWdmdQA5VvcM8hMjllll8z1gH/yYBzia+b:/fSWsqOVvcHMjllll2gH/rzia+b","tlshash":"6b82c0274fceb179ebd00cb1265795055bf09974661d4cc8a3b04eece64df1d2464cad","first_seen":"2025-06-30T15:15:02.004218Z","last_seen":"2026-07-23T05:25:55.395535Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2052,"timings":{"blocked":1857,"dns":0,"connect":0,"send":0,"wait":192,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/js.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.462Z","timestamp":1784611211462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /js.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":706,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/eth.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.700Z","timestamp":1784611211700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /eth.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1428\r\nLast-Modified: Tue, 14 Jul 2026 22:18:03 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59b-594\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1428,"size_decoded":1685,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9005879009fa34fc717f1b82c1774ff3","sha1":"0adc2e4492aaa6e0ea67439f6c395f067987e5bb","sha256":"081cfb855163c7d6fa28fab97f54c3aa8cdb217936ce7c8bda9ae8f8bdfb749c","sha512":"4055f953014647e12163d325cd97a185b14bd7d9b02d4d7befe2862e16f756e92f4fa3d9e17ffd40e6bc25a8003f94c012487f9941f55efb1eb55a90541daacc","ssdeep":"","tlshash":"9721e91e2a5093c1d0aaa4c005d7ce6332df3d356803a83d56a8ebd0b828452d8729a5","first_seen":"2025-07-13T15:42:46.650614Z","last_seen":"2026-07-23T05:25:55.391205Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2990,"timings":{"blocked":2782,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_5.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.711Z","timestamp":1784611211711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_5.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16742\r\nLast-Modified: Tue, 14 Jul 2026 22:18:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59e-4166\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":16742,"size_decoded":17001,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c02a2db685aec856a1eac1465e3ff509","sha1":"5a4bcd85133187436198d9c1d01ee13aea5507a8","sha256":"f46b271ce7f24b9bc6cf9d0be8a10264a4aa879efe90ee3e53355c5892e98841","sha512":"6b0cdbb29efca281c8b2e565c213ce56a3f78e463cec6db01e5adad253864f80aa9c026ea80934c47df7f9ea3ba3177c5ed32a894ed2ef9b2b3b92e514727112","ssdeep":"384:2b2JriAEhg7XrvjZpkEgAy5lC9qi5/cLxqzFE53:JrigvjTvo5quqz6h","tlshash":"16727d3f1ae4cd72f81a2436a2df2e1afbdce12559e119dcca750125ca1d596cf3840c","first_seen":"2025-07-13T15:42:46.642999Z","last_seen":"2026-07-23T05:25:55.412168Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3576,"timings":{"blocked":3383,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:17.826Z","timestamp":1784611217826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-net-d542.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 04:19:07 GMT","end":"Mon, 19 Oct 2026 05:17:37 GMT"},"fingerprint":{"sha1":"4B:9B:E4:71:24:E0:37:58:6B:5C:67:54:CF:3D:23:B3:45:04:BA:62","sha256":"E5:DE:17:F5:7A:42:68:CC:87:B1:7D:04:22:8E:B2:8F:0D:B9:8F:4E:70:1A:2C:CC:DA:AA:8D:4C:B8:B5:C2:75"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: guard-net-d542.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 05:20:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POkRi%2FJK4MDaM1FWdV82au4qCmWDLCcs91WK5CvwpvfGOSFGTg0Dq1Y630v8hYBqTyFyOUCp1fSPgTgcdgUgGpOJsAVeKNbxKr37inl%2FGyvhsjgzU9vRG9cwIDThN9%2FqILaeDkdp%2FAoVYM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1e7c16f6f52b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bb3d1e45de77c3aeeaa28c4977e6370f","sha1":"d5a3770b95638502337c52bd4d33041d64e0254a","sha256":"4c2b87d87ff053c05e8aea4d600cf6bb652ec2b9ed6cc73380d8b8d346749d8f","sha512":"47f7cc1e10296c0422a1d67f842071244dcf1ee7cd635251dc55b90512ba0e3905ed152b2acb13f7cde9c8bb950ea7c6a10795e310015e2b9fd1434f3ec97a2a","ssdeep":"","tlshash":"0211be450d56007105f38a9a3b5f7e05a262924640c0c5003ffae2a7af63e4b8809ad8","first_seen":"2026-07-16T10:56:13.927574Z","last_seen":"2026-07-23T05:25:55.371485Z","times_seen":13,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:18.118Z","timestamp":1784611218118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SejTmHspfboJuDFc4ZZi7pyDX7Yf%2BQ7NQcPixAluZ6HccCFxb8lUdJ4cHak0vmfug7LzyBB1LM%2BfD9yFYuaJjUFII8XHU9CuBarx3w1P%2BihfWv5eK%2B5xZI0JtDn0\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e7c1713838b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/spywolf.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.699Z","timestamp":1784611211699,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /spywolf.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2260\r\nLast-Modified: Tue, 14 Jul 2026 22:18:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a2-8d4\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2260,"size_decoded":2517,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76d119a66def0b8ea2585a58699a8e19","sha1":"440492712d2654aad1d01aa7b2a62a035481c9c3","sha256":"5d2f9f08164e0854f41f34ee63028b7bf90869314e42553b7bc41f31ddeda479","sha512":"2ebe89af1d5076e0f027e7e94de2d6bfb75f563bdaf7de705df2875104abc871c6af822b74846e324f0ec322dca917ccefd3d0e26e7d76d235c95fda3699eb13","ssdeep":"","tlshash":"19414cfe5110917ce40e1406096f3163fba6b0e01da96d8271a90deb0630e63d89f867","first_seen":"2025-07-13T15:42:46.523683Z","last_seen":"2026-07-23T05:25:55.369909Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2991,"timings":{"blocked":2781,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/step3-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.433Z","timestamp":1784611213433,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /step3-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2142\r\nLast-Modified: Tue, 14 Jul 2026 22:18:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a2-85e\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2142,"size_decoded":2399,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"579c061075e7fae7a32749bc68cf5cae","sha1":"739120f50431a8d0a37b45dcd16395aa019965c4","sha256":"1763e791b76bb137b9f78e45ebe44c911664ca2876d3a5bd1c9c7cae0d0256e6","sha512":"24723b57d8dbff7c85b70e512e3c18c7cdcbc97977e79542070a940da54224285e5bc32b255e0696bf839e200f7053a551608d5d615eaef2f06bfc95c2ecd8d4","ssdeep":"","tlshash":"7041ea2e231e13b5f85c9df450903b2a93f89f55cb57212985c8c6d62768cccbcb9045","first_seen":"2025-06-30T15:15:01.984482Z","last_seen":"2026-07-23T05:25:55.38898Z","times_seen":65,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":727,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/Librestile-Extended-Bold-GRRFLRRU.woff2","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.462Z","timestamp":1784611213462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /Librestile-Extended-Bold-GRRFLRRU.woff2 HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/styles-CTH5FURS.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 7956\r\nLast-Modified: Tue, 14 Jul 2026 22:18:08 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a0-1f14\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7956,"size_decoded":8214,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7956, version 1.0","md5":"71ab105799cb98e526b00cb0cc8376ee","sha1":"97d79c858d69656c640e52af69cbe25788e1e7ac","sha256":"cc8b60e1bf55f3cf91edfb7b27efcc1b58f22d4058b113f7f5bc0c6a34747e8f","sha512":"8f4206d7e8ee5215e5cb0289d6b3905cfe6b54a73bb501eb9b53975032ced5ca4897ee733a3b11bc478afbb3153bde3c8909daa4d080b292ef4d7d373a0cb3b5","ssdeep":"192:6FFjw6iUrbuGKwhdFeseEHaJRm897yvinW7ANhDkDXkizPUx:6FFjRbbusUPEHaJRZ7JnWcvSXk3","tlshash":"ccf19ed0d9c27797d9a882f21c1b16da7e7e4988697802c67ed4e84b21e4ce93718560","first_seen":"2025-06-30T15:15:01.989614Z","last_seen":"2026-07-23T05:25:55.370972Z","times_seen":56,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"99.81.234.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.029Z","timestamp":1784611214029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 04a82a09e801ccd99bea86ceac3b954c\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":682,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b05533c3ded95199b32b7c480697310e","sha1":"092bafcd630365d0928726d344168ab7bec24c39","sha256":"befaf2d30d1616af3da6f33b07ea357fc054a6893876626cb29ae47823483b56","sha512":"5d4f433937334a9c18074960b3b3b6083d1fb7c63a264faeb0440d8b6aa83cfe4c6612ca836e65f2f8e0c29f9f109cb298c57383f29ebb32cefb51ea83f80592","ssdeep":"","tlshash":"9bd012f4130b4b71d0ac4c449044720121217e8905c00e82080c0c8011842421725121","first_seen":"2026-07-07T07:20:30.02745Z","last_seen":"2026-07-23T05:25:55.395045Z","times_seen":20,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:15.107Z","timestamp":1784611215107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"LLqcQJx9bJ4W_gISvklY\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:15 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzT8v9mcSUwF19hlpzwQdQR%2FI0Rrit8bkZDzDiazSLC63dWzx0BXibJqifEOVH3Q1fR5h6od4nEBaitu27dql2ip5HmdpLvZMicEbiPvFBBowpZf5zHix9vmK%2FLk\"}]}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1e7c15eafdcb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2512465,"size_decoded":1931930,"mime_type":"application/javascript","magic":"data","md5":"167b6ebd51c2ee67e5e4d91e6f40fb51","sha1":"1d5f8e4dcc65a08ea137d684f4b13ae041c1f7d5","sha256":"f9df14776cacc97582837b47377eeb05dca4aa0803cdb0e473ab1722a07246a5","sha512":"fd1b822ed843cbfbea86d0ea03731a70d75676797fb1a59be9416fdebb37ded21ec5056ed04b71edc385d8bdc9d813b92d14ed584b8373f99e125e89a92c852a","ssdeep":"12288:ieZRzaYSIcv5MfCcJ4+uLcI811QBXlX0sthPcfTE9mbaPWGUirQHnU3U7Awn5cQT:zRWYLcv5+4+EszSdhPcsmWxIWU7q1U","tlshash":"6c35f15948334275569802f8a85f0f883e986bdc94cce73f9575e0f2b7866bb00e7876","first_seen":"2026-07-21T05:21:09.43617Z","last_seen":"2026-07-21T05:21:09.43617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_new_2.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.722Z","timestamp":1784611211722,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_new_2.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7876\r\nLast-Modified: Tue, 14 Jul 2026 22:18:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59e-1ec4\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7876,"size_decoded":8137,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aed1ccaffa89d82caeea379e69252b7f","sha1":"4a55334edebfa52c43fb2f71feb9c2cc49818937","sha256":"2dc64a028b3ad60e544b78d037a91e30d031858d93a03ffd3754307c5b0b675f","sha512":"45220df3679823898a703fdb9b8f898e5a3d210c92bee9fec1ae95e0689ed5a1435abd89eef6706e908503ea0bf4e097a2b767909f0533ac3ef95dc725698aef","ssdeep":"192:ZxyYWsTjvSW93JLotXeJYlliEhmoaA0HqRYqoPPx:ZWeuW3JLotOJ7EhFoZ","tlshash":"29f184da63a573d4e406f7b8a91694749a6f2cf5a7d6d794c310de90aa1308dcc9ccc0","first_seen":"2025-09-17T02:28:10.451912Z","last_seen":"2026-07-23T05:25:55.40802Z","times_seen":31,"resource_available":false,"data":null}},"time_used":3579,"timings":{"blocked":3395,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/UcCo3FwrK3iLTcviYwY.woff2","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.302Z","timestamp":1784611213302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /UcCo3FwrK3iLTcviYwY.woff2 HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/styles-CTH5FURS.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 72920\r\nLast-Modified: Tue, 14 Jul 2026 22:18:14 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a6-11cd8\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":72920,"size_decoded":73180,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72920, version 1.0","md5":"4b73e2ff3024784eca66d2120a9bcb22","sha1":"2870bcb8ece10145e089262bb6634d18ac85bec6","sha256":"2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa","sha512":"9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a","ssdeep":"1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH","tlshash":"f0630245820ba35ee09d4a79d27481f61fc2cb5c2bbf5c27538289ab5f57dbf6410134","first_seen":"2025-06-08T12:34:02.525952Z","last_seen":"2026-07-23T17:55:01.802055Z","times_seen":2008,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":249,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/core_js.min.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.389Z","timestamp":1784611213389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /core_js.min.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-3.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.437Z","timestamp":1784611211437,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-3.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":181,"receive":0,"ssl":884},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/settings.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.661Z","timestamp":1784611211661,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /settings.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":1041,"timings":{"blocked":856,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/trust-moon.gif","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.707Z","timestamp":1784611211707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /trust-moon.gif HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/gif\r\nContent-Length: 70623\r\nLast-Modified: Tue, 14 Jul 2026 22:18:12 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a4-113df\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70623,"size_decoded":70882,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 382","md5":"8fb63ac1d31c5bf85f0cf58c88da5978","sha1":"2660538842a82d66857dace5d1981e9af9f2bf07","sha256":"e0e0368bfeaebb5f2f5b2b04b6c8f2378c05d4367f57cd612139f1bf5388bed8","sha512":"743af4cb30a119f422c364b7b31a4012dfd5e3cc1c8294039de6a26b1e4d914b0ec044e658c401c772807de39842aba024fdb04b6a3592985b70632674d1289a","ssdeep":"1536:BB9aK2FbPAUwKr9oWry/+Bs7sv5Abhu6Cc78wpl4lAW0pauEHRkmoV5i:z9aKuwOmWs7sqbRdIA4GJauUJoV8","tlshash":"0263016e51e6e7417d29a4293b0a30a5dea13cd48bfd7a33a680fd716fb3919d0d0c02","first_seen":"2025-09-17T02:28:10.375124Z","last_seen":"2026-07-23T05:25:55.373064Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3400,"timings":{"blocked":3173,"dns":0,"connect":0,"send":0,"wait":199,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/common-box-star.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.435Z","timestamp":1784611213435,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /common-box-star.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 32088\r\nLast-Modified: Tue, 14 Jul 2026 22:18:02 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59a-7d58\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":32088,"size_decoded":32347,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"716b4df0167ec533e2e1358cdc38cf98","sha1":"9295654db93e72532fc2264840b0005d79ac5e1b","sha256":"eeccaaa34cb2e80b7f104a27a328c00814793a54d4b24ff673552b5e3549c548","sha512":"a5eb4fe56dff94cc596c3b3da3c0ef7b97ab0fdaabea56b3e85fbe9ef272a7354809f3995e20daa8f1721f92a99fd4d91946fc18c6ebd999dfd8b0fcc7398fa2","ssdeep":"768:yueQDV+FS70w2oEw+bLrrErwgeGFk7GXlFnfixdiNYk23DsdcP:yueQDVfImEw+bLwwm4Ynfk0NYkmsS","tlshash":"f5e2f2c18132a4cc38656534e0359311ef5fc7281af76afeda409ae9c4a11697cf26f1","first_seen":"2025-06-30T15:15:01.990398Z","last_seen":"2026-07-23T05:25:55.364916Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":848,"dns":0,"connect":0,"send":0,"wait":198,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-12.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.448Z","timestamp":1784611211448,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-12.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.258Z","timestamp":1784611214258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYxZwo5NPo0GbkeZhCvPLciCm3X5RB%2F9twqz1nkRzfBNPe9IUl4QK7GstFt1jIEk5pFEilqkFqnqYNtwf1%2FCkjTYEnr36VH3jD3GRFfxQfe8EBfxitkef%2FM3PjkN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e7c15aea7f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":637,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":276,"connect":1,"send":0,"wait":105,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_new_1.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.721Z","timestamp":1784611211721,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_new_1.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1313\r\nLast-Modified: Tue, 14 Jul 2026 22:18:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59e-521\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1313,"size_decoded":1573,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40f62cf67f4393be0847721ea094f605","sha1":"1815baba4245b03894b6821b971ce47a92f50f64","sha256":"c64c96a185768503b6ffbcf6df2f903ea579c0085959d638fd856738d743d584","sha512":"8741879daecbd112a1228b412c44df5c5f0851109ec48f983976fe6520fb49ee0b354cefc936a17aeb30571092a16d583d7288372a3d55bc9b3fd3a2cf304d47","ssdeep":"","tlshash":"0a2115d6524cc6f45cd39398154b1064cf7a65e6ce94408dd95069afb8fc08ec648ec9","first_seen":"2025-09-17T02:28:10.560215Z","last_seen":"2026-07-23T05:25:55.374937Z","times_seen":31,"resource_available":false,"data":null}},"time_used":3587,"timings":{"blocked":3393,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-13.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.444Z","timestamp":1784611211444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-13.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/trustby-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.431Z","timestamp":1784611213431,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /trustby-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12602\r\nLast-Modified: Tue, 14 Jul 2026 22:18:12 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a4-313a\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12602,"size_decoded":12861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0aa1df31bf2e36c28a23362c6c352f02","sha1":"fd5b896e2e609657efe3e9a1311ce5a89978e882","sha256":"95748e73a4f1ef6cf0ce97466a26e198b7a0c7e4861850784d7128712fad1da8","sha512":"0b5e6234434fc2d219808eb89f309fa9ef41b020713af8110c0a400ece36596a3803fc7d836b43aa0220feaa757571de456d51ab59a5ec524dbcb79a3f7fda07","ssdeep":"192:KRQvWaou0gD72vbGZ7BsPcsTGQSD3feASY4gW6h0MMRo+haiLLNErRcD5O6pvsmW:KKeaoqD7mGZ7BsfTGQS667MpEr0/pkmW","tlshash":"cf42c0cb7d56c93f20d9d9f4687d1328d702e7923af80ea233ea1551d0c4ede8a19239","first_seen":"2025-06-30T15:15:01.986146Z","last_seen":"2026-07-23T05:25:55.379571Z","times_seen":58,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":691,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/styles-CTH5FURS.css","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.663Z","timestamp":1784611211663,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /styles-CTH5FURS.css HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 14 Jul 2026 22:18:11 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a56b5a3-132460\"\r\nX-Powered-By: PleskLin\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1254496,"size_decoded":83349,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4d98e49f51889f1eee98ad1ace2d3c02","sha1":"bc849c123cddbb5c2da7f8e4649b84f93422f66f","sha256":"b2a4f0ea9e2644c741836167b51e1c1ef155f66584c8728ea0849c7ce5267bc3","sha512":"efee67dc9d90e67a297da19f46c8f6fcdca5e6c756c9a457ae20c6da6fd072d3357c99a21b06ad9c6614b7258289779c0956fb40589f997a63cecd71d5a0ca62","ssdeep":"12288:GuB5U5XoAX0UMEUmpFiYxSlXkKJJQ1VpPke:EFiYxSlXkK3MTPke","tlshash":"8e250adff0c4323c8a6a9816fcc47a7ca83fd7697b235b89a11233655b6a6d7803115c","first_seen":"2026-07-21T05:21:09.459252Z","last_seen":"2026-07-23T05:25:55.402247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1518,"timings":{"blocked":894,"dns":0,"connect":0,"send":0,"wait":301,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/trackpoint-async.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.459Z","timestamp":1784611211459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /trackpoint-async.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":674,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/pixel_loader.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.402Z","timestamp":1784611213402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /pixel_loader.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qrcode@1.5.3/es2022/qrcode.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:16.834Z","timestamp":1784611216834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /qrcode@1.5.3/es2022/qrcode.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/qrcode@1.5.3?bundle\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 18 Nov 2025 06:45:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Jul 2026 05:20:16 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a1e7c1693c6a723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25531,"size_decoded":11928,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8512)","md5":"fb175f14a827cd8a508964410ad97be7","sha1":"e64f2d0aaa25f25ec01b4c5303bdbe979c333845","sha256":"c14590513979baedbdd1a136d042cdc35c2ca2a6c16429b52e259e98bac80308","sha512":"e52e742a1243ed2baa2cbbbec6f60e563f436c161d05ab3b4439d2e00498872c075ce8758250da8e52e9c17ba6704018d155d6c757119dd3c546d6f12f486e0e","ssdeep":"384:G3TMj+AHdEOvOuTqUYgOPUPbU2dHFTx9yi/URJFl+BOkeL1zNC4hzV3BGqOVThMW:cOJrqP0dlTCiEJZuJVTni2YI9QY","tlshash":"5cb2e799739171ab439b5196006f4046f3fea864282d496cdb51e8c77cb8d6980fbf38","first_seen":"2026-07-16T10:56:13.923506Z","last_seen":"2026-07-23T05:25:55.38324Z","times_seen":13,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.949Z","timestamp":1784611214949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"LLqcQJx9bJ4W_gISvklY\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:15 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhhOC9E0W5pNeVLVYVNY7Nav9V%2BKbjDEYEnnem3CpqJLZoPHcUCcaGvLSRwt3sADLuW8DDtFbS2A8k8uiE24DlsnMc2mzTt59whYdCd4nZN6ZIxtlr8CfxsvVfc8\"}]}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1e7c15dafd3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2512465,"size_decoded":1932515,"mime_type":"application/javascript","magic":"data","md5":"9b85403265e5dbda804544434d771871","sha1":"d20be1373a7b04e0485239de779d5c4975c1635b","sha256":"e40384194efc9a330fe711acbd802f9afe2c18bda38e1bc24fd85b6c02c99a5f","sha512":"075ca8456dc69072f185bf66710bf9d14f84683bbb3a2b3a3723e93fa4789576e6d194798f95a622cb5aab387e0e4a9b69c1d68973d3eeb3120d5c52e98c7b1f","ssdeep":"12288:ieZRzaYSIcv5MfCcJ4+uLcI811QBXlX0sthPcfTE9mbaPWGUirQHnU3U7Awn5cQf:zRWYLcv5+4+EszSdhPcsmWxIWU77","tlshash":"8925f25948334275669802f8b85f0f883e946bdc948ce73f9575e0f2b7866bb00e7876","first_seen":"2026-07-19T18:18:02.165494Z","last_seen":"2026-07-21T05:21:09.469988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-8.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.440Z","timestamp":1784611211440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-8.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/polyfills-GFHN5YI4.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.717Z","timestamp":1784611211717,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /polyfills-GFHN5YI4.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/faq.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.438Z","timestamp":1784611213438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /faq.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 160068\r\nLast-Modified: Tue, 14 Jul 2026 22:18:03 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59b-27144\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":160068,"size_decoded":160329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c301b75fbb7dfa62ae839177e647a633","sha1":"93c4e2b1b0c8df5b98efa99176659dd1cbe3591d","sha256":"636b96fdac0eb9cc39153b9394ddcb46b05f92680cfd38efa03973edee3a882c","sha512":"fc1745a43ee0830356e06df36df8586f268519ea46858a5b4314dec225d4d0d270f67b11fb9a0426df2493ea4ad13fe615fbe7d64d8e837c47533bf1442e2826","ssdeep":"3072:pBb3Sbs2c0LbcTIm0aTO16CFeCrWkOSMiAdNtpulxmWMqj4Y1vdRJEYx:33SO03ctD2HLakOSwXLuzlv/bx","tlshash":"cbf31200a10ad336c3d4bdfd5751aebc6d21d6b54c1edea5c8894ac30af602bdfb0885","first_seen":"2025-06-30T15:15:01.986874Z","last_seen":"2026-07-23T05:25:55.376311Z","times_seen":65,"resource_available":false,"data":null}},"time_used":2271,"timings":{"blocked":1858,"dns":0,"connect":0,"send":0,"wait":209,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:16.576Z","timestamp":1784611216576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-net-d542.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 04:19:07 GMT","end":"Mon, 19 Oct 2026 05:17:37 GMT"},"fingerprint":{"sha1":"4B:9B:E4:71:24:E0:37:58:6B:5C:67:54:CF:3D:23:B3:45:04:BA:62","sha256":"E5:DE:17:F5:7A:42:68:CC:87:B1:7D:04:22:8E:B2:8F:0D:B9:8F:4E:70:1A:2C:CC:DA:AA:8D:4C:B8:B5:C2:75"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: guard-net-d542.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 05:20:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hb3IOtSvewLjJmOh8BlSHGlNl1UOykAIrEgftOMadHGDYm2%2FFHgmuroJXVsf4oMQiX%2FmfF0JHp7RNAhvT03Plp6kjPgl51ld7QiQ3msZ%2FF5t5LqGVVabz9bMXKB7jDzfz%2FvaplJ9WPUrT3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1e7c167ebd7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bb3d1e45de77c3aeeaa28c4977e6370f","sha1":"d5a3770b95638502337c52bd4d33041d64e0254a","sha256":"4c2b87d87ff053c05e8aea4d600cf6bb652ec2b9ed6cc73380d8b8d346749d8f","sha512":"47f7cc1e10296c0422a1d67f842071244dcf1ee7cd635251dc55b90512ba0e3905ed152b2acb13f7cde9c8bb950ea7c6a10795e310015e2b9fd1434f3ec97a2a","ssdeep":"","tlshash":"0211be450d56007105f38a9a3b5f7e05a262924640c0c5003ffae2a7af63e4b8809ad8","first_seen":"2026-07-16T10:56:13.927574Z","last_seen":"2026-07-23T05:25:55.371485Z","times_seen":13,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":40,"connect":10,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/assets/index-BNvd3EQG.js","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-07-21T05:20:17.859Z","timestamp":1784611217859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-net-d542.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 04:19:07 GMT","end":"Mon, 19 Oct 2026 05:17:37 GMT"},"fingerprint":{"sha1":"4B:9B:E4:71:24:E0:37:58:6B:5C:67:54:CF:3D:23:B3:45:04:BA:62","sha256":"E5:DE:17:F5:7A:42:68:CC:87:B1:7D:04:22:8E:B2:8F:0D:B9:8F:4E:70:1A:2C:CC:DA:AA:8D:4C:B8:B5:C2:75"}}},"request":{"raw":"GET /assets/index-BNvd3EQG.js HTTP/1.1\r\nHost: guard-net-d542.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 05:20:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8YrmP%2FKjw0oNBGLEbt74iWQheCZKEsglOGB14F5M0g%2FyPvKoATs6MRnUBYGO%2F%2B3Uus9NPm2M4atLKX4WmbJi1SqlIX5KCGltOejE71%2FH0OlxdbmimnBHpC6BxTwvW52qhWzsf8x0d55UdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5cd274bad704d787d4419d8e7e73573a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1e7c16f9f67b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38769,"size_decoded":28581,"mime_type":"application/javascript","magic":"data","md5":"71a8b7083d8636e1127c500ac3db9db4","sha1":"eb49062338fc3e0b0a94fa25ad30fa3820adb331","sha256":"d70712d48240383bd6ee3bb75023d53efc0fb88ca1cb9ffcd7b715f9cb12ec6c","sha512":"41284d152d9484d645860c0a346d187a8b05c470f002b631d5a903efccc95b838169bb4a57f4f530a306d3362f41b71e4185d99fde7bbd61a543b91f6d2fab73","ssdeep":"768:6EmJtKFk84cUc0L9s9upR6WXsrKZaeLaxksu/CAslP+z+OPMEmV2acv0HBQhDWM2:6Emm+P2RIp0WsJeLaxzu//SOktMv0h4w","tlshash":"c903cfe164354215028d532c395f14caecfc8f6b544d8b2af12ad171aee0ae588bfded","first_seen":"2026-07-19T18:15:37.17364Z","last_seen":"2026-07-23T05:25:55.38983Z","times_seen":10,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.657Z","timestamp":1784611211657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/ethers/5.7.2/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 05:20:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 139139\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 20 Oct 2022 04:30:31 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZNou%2FPgd5xWF55dmwEkTvqsvIE%2FjG7ztQA8ZoRUWZz9DrHCGjllAC1ADGNA1LmVVpzR1wzHSAgrXB7rXML02VycxrQa11NQ8CdswVIq1BgzzQwvpguFzgctcVm8bIxd5k8nCnVc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1e7c148f998b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":140143,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":42,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/7616c78950.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.687Z","timestamp":1784611211687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /7616c78950.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/javascript\r\nLast-Modified: Tue, 14 Jul 2026 22:17:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a56b596-588\"\r\nX-Powered-By: PleskLin\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1416,"size_decoded":903,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"5b301660107450aacc840e878156bc1c","sha1":"3f77e17fe09f2910a0b9a00c956601475bc2f131","sha256":"70c070c7ab9aa7883a32679f765b775e94f4edba757795e2e2f505524dbc215e","sha512":"cc0e0fea6876cea2ca49eb6a4211b3e77787b81e61b321766bc521ae487cb26288aa7fd2f4fe3c8ed2fdb9dea7149074214398f902178be9eb01091951aaf9c5","ssdeep":"","tlshash":"6121c0dbba52f4401b85b7b6986f740d9767bd0adcd94428d40055c23dbeb1fd012568","first_seen":"2026-07-21T05:21:09.35798Z","last_seen":"2026-07-23T05:25:55.384575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1115,"timings":{"blocked":926,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_new_4.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.723Z","timestamp":1784611211723,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_new_4.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1875\r\nLast-Modified: Tue, 14 Jul 2026 22:18:07 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59f-753\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1875,"size_decoded":2135,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e953159401d2c8183a63f3f13629bb59","sha1":"b02e917f3e1d94e0b7869a32b2c11bacce137654","sha256":"adc311e7f198cbf8a8044b864dc28981637fb1509e26d2ef812898c1a0035c69","sha512":"6d351c5a9de178cdc8913895de2ca8ed822d9e28d4059e5c2da2d35eb2f727cf3cc6d9a3c9b09034debc8e79c6b2fd87d99867347098278ad494baa4b586584e","ssdeep":"","tlshash":"aa318489b329d7d4a40c2bfc4f29d4a5232b8cdae735da9443c31e46794501f0969ed4","first_seen":"2025-09-17T02:28:10.544419Z","last_seen":"2026-07-23T05:25:55.407166Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":1446,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/banner.gif","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.471Z","timestamp":1784611213471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /banner.gif HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/gif\r\nContent-Length: 711384\r\nLast-Modified: Tue, 14 Jul 2026 22:17:59 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b597-adad8\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":711384,"size_decoded":711644,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1476 x 366","md5":"4add897377db5ab6d5726633c09a0529","sha1":"ea9569cccb8112012792411e25d2bc5cd3e09b37","sha256":"3b1b28aa77e355c1de644da79ad3725726565cc2aa1ec1b55e1a9a5cb83f0caf","sha512":"8be07eb86ef7a8e6349cfc1327376dd977451e3a69e8044602b44e0b36de539a137ba577d1e2110a522916fec26c8efc778d53266316bc7aafedb0cfdee2fbab","ssdeep":"12288:TWFK6GvNZWgg8JvW6EtRlAnkxklbQC339iH5C6JydQ2TL89dOggnPmdB:TWFKnQ8JO6orGkOQc3AgdQ2f89dzgPY","tlshash":"42e4238bde09e3860926fce095c20375e87a34d11ce5c226825c787e216ba5af51dfdf","first_seen":"2025-09-17T02:28:10.45978Z","last_seen":"2026-07-23T05:25:55.387036Z","times_seen":32,"resource_available":false,"data":null}},"time_used":2351,"timings":{"blocked":1860,"dns":0,"connect":0,"send":0,"wait":206,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/Librestile-Extended-Bold-GRRFLRRU.woff2","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.013Z","timestamp":1784611214013,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /Librestile-Extended-Bold-GRRFLRRU.woff2 HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 7956\r\nLast-Modified: Tue, 14 Jul 2026 22:18:08 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a0-1f14\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7956,"size_decoded":8214,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7956, version 1.0","md5":"71ab105799cb98e526b00cb0cc8376ee","sha1":"97d79c858d69656c640e52af69cbe25788e1e7ac","sha256":"cc8b60e1bf55f3cf91edfb7b27efcc1b58f22d4058b113f7f5bc0c6a34747e8f","sha512":"8f4206d7e8ee5215e5cb0289d6b3905cfe6b54a73bb501eb9b53975032ced5ca4897ee733a3b11bc478afbb3153bde3c8909daa4d080b292ef4d7d373a0cb3b5","ssdeep":"192:6FFjw6iUrbuGKwhdFeseEHaJRm897yvinW7ANhDkDXkizPUx:6FFjRbbusUPEHaJRZ7JnWcvSXk3","tlshash":"ccf19ed0d9c27797d9a882f21c1b16da7e7e4988697802c67ed4e84b21e4ce93718560","first_seen":"2025-06-30T15:15:01.989614Z","last_seen":"2026-07-23T05:25:55.370972Z","times_seen":56,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qrcode@1.5.3?bundle","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:17.893Z","timestamp":1784611217893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /qrcode@1.5.3?bundle HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /qrcode@1.5.3/es2022/qrcode.bundle.mjs\r\nx-typescript-types: https://esm.sh/@types/qrcode@~1.5.6/index.d.ts\r\ndate: Tue, 21 Jul 2026 05:20:17 GMT\r\ncontent-encoding: br\r\nage: 375021\r\nlast-modified: Tue, 21 Jul 2026 05:20:16 GMT\r\ncf-ray: a1e7c16fdca8723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":675,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3c633c53c9fbe15a5c22f0b8899b6893","sha1":"7cab6abcfb791b0add36a6474a84b35480e691a7","sha256":"5edcf7ea485e644fee892456f28d1ea5e3ea88d14b618e471702eaf464a4fbfd","sha512":"49c17373f9896956be21a5d9d42a250f55c7cbd3790a219766d626344265f4ee7fcb7c93c3eb4b7f7b65dda821272439d01eadfbd87563ac92ff6b5f939cf66a","ssdeep":"","tlshash":"38c08c20403f921c003028dc292cc03063598208992022f84ba8df0c53a000090243a4","first_seen":"2026-07-16T10:56:13.922637Z","last_seen":"2026-07-23T05:25:55.385537Z","times_seen":13,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"99.81.234.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.755Z","timestamp":1784611214755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-2.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.436Z","timestamp":1784611211436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-2.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":185,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_1.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.708Z","timestamp":1784611211708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_1.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 18390\r\nLast-Modified: Tue, 14 Jul 2026 22:18:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59d-47d6\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18390,"size_decoded":18652,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33ad5cd8664058deb0696e5f2af06585","sha1":"33c29d1445d96b27fa1b0f9c8400094c066305a1","sha256":"39812747361f0070522a7f53d8ed32a24255a08f3c6015d2be85aa484c5b996f","sha512":"193ff0b85d223bbf8fd8a51b81568806c52114f622c5f5fe1063843009d95363956ccea22b08f10c2456879e53020ba9d08467798700315777e299a83cb5a507","ssdeep":"384:WMcRz57NDjr+c3V5YBf7n1iSmdvV3XNDZR7boQeHJ0:WMcRF7FF3UBfpyZV3pZpFF","tlshash":"ea82d8c473eda3e0e905ebe4ce25a475bf1f14f6ae61c6b8c3a92c54b41546d8d88cd0","first_seen":"2025-06-30T15:15:02.017507Z","last_seen":"2026-07-23T05:25:55.381017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3392,"timings":{"blocked":3181,"dns":0,"connect":0,"send":0,"wait":207,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/banner-bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.423Z","timestamp":1784611213423,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /banner-bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47032\r\nLast-Modified: Tue, 14 Jul 2026 22:18:00 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b598-b7b8\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":47032,"size_decoded":47291,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14b13ffc103434591d91479388b72dc6","sha1":"0854f7aa1ef56c6fa9cc2d0d45b5fabea489fe03","sha256":"de1b35021d9311339c166f9c9d761080c5d64de7e0a436a4965645de40738ab1","sha512":"f9c0aa5e99debb47d2948bbb036bf7d23a3dcf47acdb7c48bb3a09bbc605fc9da111a169a59e063a4029a4bb85a84afa8a925873120cdc30d3cc451a58308697","ssdeep":"768:yTHEo8gn4WLuNnaZ9slzrLUmocCdKhqsbabyo/ud8EC4hXAWMHraV/lOcPuWlW:Wf8gnJ6ZaZErLUmocZaycudXCUR2c/Ex","tlshash":"722302d9d7350ad5f09a67f398a351a4f11dc3c02e60e4bba651716823ed3487e1473d","first_seen":"2025-06-30T15:15:01.994348Z","last_seen":"2026-07-23T05:25:55.367504Z","times_seen":67,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":494,"dns":0,"connect":0,"send":0,"wait":203,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"99.81.234.154","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.754Z","timestamp":1784611214754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: c09cd742366928acbd06bfdf47b185fd\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":682,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b05533c3ded95199b32b7c480697310e","sha1":"092bafcd630365d0928726d344168ab7bec24c39","sha256":"befaf2d30d1616af3da6f33b07ea357fc054a6893876626cb29ae47823483b56","sha512":"5d4f433937334a9c18074960b3b3b6083d1fb7c63a264faeb0440d8b6aa83cfe4c6612ca836e65f2f8e0c29f9f109cb298c57383f29ebb32cefb51ea83f80592","ssdeep":"","tlshash":"9bd012f4130b4b71d0ac4c449044720121217e8905c00e82080c0c8011842421725121","first_seen":"2026-07-07T07:20:30.02745Z","last_seen":"2026-07-23T05:25:55.395045Z","times_seen":20,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/fire.gif","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.694Z","timestamp":1784611211694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /fire.gif HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 156825\r\nLast-Modified: Tue, 14 Jul 2026 22:18:07 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59f-26499\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":156825,"size_decoded":157085,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1500 x 265","md5":"a33f73f88e9f289c036c270af293ffd4","sha1":"9fe5fa6cfa781e0d40b2ebc752cba4821785de04","sha256":"09566005b6c909240e9494314d5be172ebeae59ed8ee425ce945eebafd8f06db","sha512":"655009ddffbf3324fa75469ee73dcf04a6e27f179af122b0ca431d4d7cee00c276b2b8f99be0bf2939626f1086d10946a7b79d0fde81a5bb7d7b07530c1ad588","ssdeep":"3072:KT2gOkVjcdZgBulLElXObL2iEFGynExH59/UD:KT2iGZgBaLEkb6iEFGyq59/K","tlshash":"efe3125587ad88652f13283c6e5929d26ea6f0cc7e72f0b730186d70fa8f7671da404b","first_seen":"2026-01-21T02:38:48.559301Z","last_seen":"2026-07-23T05:25:55.386543Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2208,"timings":{"blocked":1477,"dns":0,"connect":0,"send":0,"wait":252,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/feature_2.svg","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.709Z","timestamp":1784611211709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /feature_2.svg HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9152\r\nLast-Modified: Tue, 14 Jul 2026 22:18:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b59d-23c0\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9152,"size_decoded":9413,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5a8b1d6f6d2677471cfe2c75942130f","sha1":"f841a00acd660f04edce17c15e50dd5845c5bad6","sha256":"af3d90ada134ceba45371be12397e5194c7d03abb4c5be0eed4f2767cc751949","sha512":"d01be943ac9fc73f0e3b02b77d3f1e559f03e2325fbbbb694b32725d76f800b2bda061f23ddecc09c819908f80f165d3b8aa18a0f28b540f4addbdac59124c90","ssdeep":"192:m+qVWzkAnceu/HUMd+xCHmg/aQVYdbdiMSVqBucp2deslqgrNkhyfZCgp19cL9EM:mAkscZPN/aQUdiMSVqBucp47ruhyfZCh","tlshash":"841287ea97f062f8f843fba0c8174666b95e28ff6792c75cc2141d542766078ce9cc98","first_seen":"2025-06-30T15:15:01.995798Z","last_seen":"2026-07-23T05:25:55.378658Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3418,"timings":{"blocked":3222,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/trackpoint-async.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:12.441Z","timestamp":1784611212441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /trackpoint-async.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":366,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/media_bg.webp","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:13.436Z","timestamp":1784611213436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /media_bg.webp HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 162394\r\nLast-Modified: Tue, 14 Jul 2026 22:18:09 GMT\r\nConnection: keep-alive\r\nETag: \"6a56b5a1-27a5a\"\r\nX-Powered-By: PleskLin\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":162394,"size_decoded":162655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c6bc8d349299f668a52f1a4fd55039b","sha1":"da86cac934fd7b8b32aa7acdd5b1db1457442f47","sha256":"9bdc9b8f244a927ae5ebcaf698804aab13317a723428f47cc931de651ccd4c39","sha512":"9ed669926e2c3f00a646b5a673a099f4b112a02f7538877f81089b63769bf6b75544392a4359b1652ace4db812b2194d7b4397b4d7c4853e1fe5bd6f4cb73d07","ssdeep":"3072:qDP8lFCfJcOJvmW7qLi9u/EcPoTD0EQGcX167fcYlq//89AcpKRkBdvMBMXFtsA:qOcfJTwOu/3PoH0rGcEDcYl8sPvL1CA","tlshash":"cbf312fbc350f086544c9b2d4283375bc3926fead3bad9007a9e32d12c775da69a1d14","first_seen":"2025-07-13T15:42:46.602916Z","last_seen":"2026-07-23T05:25:55.413921Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1961,"timings":{"blocked":1728,"dns":0,"connect":0,"send":0,"wait":191,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:14.257Z","timestamp":1784611214257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://presaleremittix.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"LLqcQJx9bJ4W_gISvklY\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 05:20:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rAVHaxjqulq65R0VhREV3D6%2FGYLCh2yAeGz1pkogg0jWR4xgyV9GvQdWponTGCCQ6bqjv0U41YKDQ1MofLLZgp25HAsv1xuGLhSftzXZ%2FKs2XLROJluXpRkVJ6YA\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1e7c15b9ae75697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7300,"size_decoded":3409,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"28b2421b80b8ede62d7c92f836b6677c","sha1":"f4432a6ea0e4e54f194024909ba9b39dbb83c2a5","sha256":"0dbc7411108bf4635012cd383b393f36523fec6e902e721ea7e9411f7d926aa0","sha512":"8dde9ac9194f58e7648e7b23fe3033e7d5fcc7a8aa8ceb45c7f834325414cd158e84dbe9ef56d504fc09a6030061202604c5f20d2f806f0c582ed2301e9e2c26","ssdeep":"96:KZajqexmADY5EiDslYV89WgMsGvYsUckYxmi2nK/atPjG3PGZejQOCs:Ka+er0EiDsl8gCvYsAYxmiC7G3Qej0s","tlshash":"1ee1202370dab54e01c9073e365867e5d4bad946da8ac00af388dee875ed8937e0c5f1","first_seen":"2026-07-21T05:21:09.50246Z","last_seen":"2026-07-21T05:21:09.50246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/polyfills.23669dac334c08ae.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/index_1.html","date":"2026-07-21T05:20:14.510Z","timestamp":1784611214510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /polyfills.23669dac334c08ae.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:14 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-net-d542.pages.dev/assets/index-BNvd3EQG.js","fqdn":"guard-net-d542.pages.dev","domain":"guard-net-d542.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-07-21T05:20:16.777Z","timestamp":1784611216777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-net-d542.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 04:19:07 GMT","end":"Mon, 19 Oct 2026 05:17:37 GMT"},"fingerprint":{"sha1":"4B:9B:E4:71:24:E0:37:58:6B:5C:67:54:CF:3D:23:B3:45:04:BA:62","sha256":"E5:DE:17:F5:7A:42:68:CC:87:B1:7D:04:22:8E:B2:8F:0D:B9:8F:4E:70:1A:2C:CC:DA:AA:8D:4C:B8:B5:C2:75"}}},"request":{"raw":"GET /assets/index-BNvd3EQG.js HTTP/1.1\r\nHost: guard-net-d542.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://guard-net-d542.pages.dev/?host=https%3A%2F%2Fpresaleremittix.com\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 05:20:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chzsiD%2FVfgeCjyAuKqkq%2FT9crt8EgZiTxaKh6BblO2kRFA8RAiGnXTNxsyG07YQtvK3q4NDW3sBrngA9MEa756pe4H4Bf88RW1No9Py5Rr3xF7fJheTbr9gqtmi6HkOasRU5E4nuQpAWZg8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5cd274bad704d787d4419d8e7e73573a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1e7c168dc3db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38769,"size_decoded":28575,"mime_type":"application/javascript","magic":"data","md5":"71a8b7083d8636e1127c500ac3db9db4","sha1":"eb49062338fc3e0b0a94fa25ad30fa3820adb331","sha256":"d70712d48240383bd6ee3bb75023d53efc0fb88ca1cb9ffcd7b715f9cb12ec6c","sha512":"41284d152d9484d645860c0a346d187a8b05c470f002b631d5a903efccc95b838169bb4a57f4f530a306d3362f41b71e4185d99fde7bbd61a543b91f6d2fab73","ssdeep":"768:6EmJtKFk84cUc0L9s9upR6WXsrKZaeLaxksu/CAslP+z+OPMEmV2acv0HBQhDWM2:6Emm+P2RIp0WsJeLaxzu//SOktMv0h4w","tlshash":"c903cfe164354215028d532c395f14caecfc8f6b544d8b2af12ad171aee0ae588bfded","first_seen":"2026-07-19T18:15:37.17364Z","last_seen":"2026-07-23T05:25:55.38983Z","times_seen":10,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-7.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.449Z","timestamp":1784611211449,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-7.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":332,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/destination-11.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.450Z","timestamp":1784611211450,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /destination-11.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":403,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presaleremittix.com/pixel_loader.js","fqdn":"presaleremittix.com","domain":"presaleremittix.com","tld":"com"},"ip":{"addr":"149.28.145.220","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:11.764Z","timestamp":1784611211764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presaleremittix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 22:53:31 GMT","end":"Thu, 08 Oct 2026 22:53:30 GMT"},"fingerprint":{"sha1":"18:E6:70:F5:7F:E6:B5:98:A8:9B:C9:96:03:B3:41:27:9B:F9:8D:70","sha256":"9C:AE:8B:2E:51:D5:42:AC:DC:40:89:54:91:23:15:BB:47:A3:60:A1:96:84:9A:FB:E3:91:92:15:59:4C:C2:0B"}}},"request":{"raw":"GET /pixel_loader.js HTTP/1.1\r\nHost: presaleremittix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://presaleremittix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 05:20:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 23:51:26 GMT\r\nETag: W/\"328-6564a6b36154a\"\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":622,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":1124,"timings":{"blocked":940,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presaleremittix.com/","date":"2026-07-21T05:20:17.979Z","timestamp":1784611217979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://presaleremittix.com/\r\nOrigin: https://presaleremittix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 21 Jul 2026 05:20:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNHg1cwlPS5PKb%2BJA5XKQFpIlCP%2BykDEfMwaNPJ13x4VdUONcAQxo%2BSOimf1vQU%2Bn%2BybDniRfvwEi8eZv8B1%2B0zWOJPefxn%2FAuE9kegk58Be%2BwjLW3C%2BAoU%2BSqP4\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e7c1705836b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}