{"report_id":"e57e94ed-4b23-4521-b548-56759b826fd7","version":6,"status":"done","tags":[],"date":"2026-02-24T16:09:32Z","url":{"schema":"http","addr":"fxcoinb.top","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":0,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"fxcoinb.top/#/no-wallet","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"title":"undefined","dom":{"size":6364,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1244)","md5":"1638be53a6837a65b4afe21e215349be","sha1":"ce1ebaefecbc2074fcdf4775ca15162bc18339f7","sha256":"076c1beb3991a41d68a24c4896850af6c2840b09c8fa256e7b98279d3546c09e","sha512":"7a3465c23b1a36c7d9a311ca652c3825a933ab533349c51cb4f68c206ef5316c80d9b13e928fa14492cb47d51f0866e70acfc423a4451069b5be0a9f1cef5c9e","ssdeep":"96:er8VsWp7Cuj7SFeS9Rt/1Or6TCZydHRH/9R2mUsGKAiowGaVxV4b1dB1nPEPHTPN:eAj7K/KZCxfv2nfD3bjb1dB1nYzY3fw","tlshash":"c4d1a6b36cb0886b236345a7eae7b904ba615227841d5860f5cd80ed4fe1ff1c8cb725","dom_hash":"domhash00bfdf25596d1d4348b5b32102101941","first_seen":"2026-02-24T16:09:38.889611Z","last_seen":"2026-02-24T16:09:38.889611Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fxcoinb.top","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":0,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T16:09:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fxcoinb.top","ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-02-01","domain_rank":0,"first_seen":"2026-02-24T16:09:34.384956Z","last_seen":"2026-02-24T16:09:34.384956Z","alert_count":16,"request_count":16,"received_data":2544296,"sent_data":7060,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fxcoinb.top/","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5f9bf5617e4adcfd01b7a61b76f3262","sha1":"4a027db07c9c63c7e9e90aac741c6f5a6955fc5c","sha256":"f976a1e1828fcb6cb82e4722bc1abfddabe63fd1faed892bca534bc737c8f89f","sha512":"60e26b171fe4a0846d0f308f99d9df268c662bb4aef22058414aa797f0d06adfa45d0953112697e2de79533baa0be5eb1f1715501c3e5b0c5f107f243fc352d1","ssdeep":"","tlshash":"4611abfe291aa0296303404e976b7801642250b9001a185177cc9a9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2026-02-24T16:00:34.608136Z","last_seen":"2026-03-02T14:19:35.105709Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-11T21:24:02.272843Z","times_seen":41361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/index-C1f18xL6.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b160cbbdb558a6f069d65a9ce6822bbe","sha1":"949b914a12ab687ffb5e50f0a2095a87c63d3a61","sha256":"7de1bcaa95424ff5ae61a696f6bcc0c344382edbfef14db64218abd639f1ea6c","sha512":"c7555116b6be2cd66801c3a2e58a5a5c5a23ea6acf99ab9bde9dd3b0aa25ca8a17ff91c76071c420c24d47b620430f86a4ec8229cbfc08c36e7a2f13946219df","ssdeep":"1536:ZtA6+0IQwVslXSFpbEXjPpzyVGiFxwb3nY4UnqpZ6phNf:B/xzylSTUnqK","tlshash":"e7b37e46950b4eff29fa0a542a97291030640fd6c54ccc67b76d6f192bb6c9ca31fb28","size":115479,"data":"","first_seen":"2026-02-24T16:00:34.573682Z","last_seen":"2026-03-02T14:19:35.08962Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-11T21:24:02.273528Z","times_seen":42826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/vendor-DswlOrQU.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"54255f41ab432c4747879d57f0b8c57d","sha1":"4a9295892fc282641e655db49ee3e62f8bb12ded","sha256":"27d96a333d573bc91c4a20e5d95346aa8f4d3a16101947ab155190d849127024","sha512":"4784918a8f8fdc01bbdc482db6bb6929a078162ca62b522e1e86c2e72e80b83a6fd797d8fdc42d2b387e166095b5185a7551ca24d4a17f1401826d4ad4b0f6da","ssdeep":"12288:iPGdqxnISWCiFSZU+QVDX/GpShekcgZ3hrK24oySWz7NC+np2bBX:iPyqlFrikJcDsjy3hG2/ySWz7NEt","tlshash":"39153ac97292f06147ab60e140bb1006f3396e59740e84a4f16dd8eb7d6ad89e277f3c","size":908983,"data":"","first_seen":"2026-02-24T16:00:34.600026Z","last_seen":"2026-03-02T14:19:35.086864Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/en-YERpUf3j.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ab8b76ffb8e96964936ed0dfff10485","sha1":"a3cb8b3b30193f4df7b9043ae8674a65baa06db0","sha256":"4fe37b48cbbe5c064951fe5e096a732da6e1f7b36cd0ed304bcbce9e9323a0cf","sha512":"d80682d648e6580661f46919a8d69eaab0118b2e166e14efae5be7397d51df64af4112b1aa0f1fd22fe1f71a067ae4d236f638c664a88a7c3a20d252218ca636","ssdeep":"768:KGtZcEw/o7rWhKxsUinAMCtQriaAMFBoP6+ksPG928mwOUfpk7aOGxzip+:uponWhgkEtQrXFB9sPW2TGxzn","tlshash":"bc13e8893e1a98da04f3536674ce6e1120f50ac2c256881f4fedc9fd53d2b67a367a34","size":45016,"data":"","first_seen":"2026-02-24T16:00:34.594797Z","last_seen":"2026-03-02T14:19:35.066239Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/charting_library/charting_library.min.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-10T19:13:12.487093Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fxcoinb.top/charting_library/charting_library.min.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:11.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Oct 2025 07:49:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f73b1a-2a6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-10T19:13:12.487093Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/index-CgaAK0wD.css","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:11.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /assets/index-CgaAK0wD.css HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-524bf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337087,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"7d8c217bab32fb18c30aa31237f1fc3e","sha1":"f8768150d82680b636494fb116b93cbf62261ee7","sha256":"3c01c8810190ba7f404ff40c535f803882d29616b6116c96439a6a9bc38af9dc","sha512":"218a4199e157bf99c5788ea5aed2fbeecc368b346c88f096907826afa4e5cf18f0545874609cb9cf5ae55c075d107c8e62ff86b337e5e4778ab26d0d2b79f65d","ssdeep":"6144:pi/xsaREznnkZYw71ZACkFDS3vyf58rBep05TA:4/1enkZYw71ZACkFDS3vyf58rBep05TA","tlshash":"bd64c699e590117d6f17aa75abce5adcf23ce9619d01cde9f20124090fc3bfa126321b","first_seen":"2026-02-24T16:00:34.602148Z","last_seen":"2026-03-02T14:19:35.085523Z","times_seen":3,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"fxcoinb.top/ws/f8edee8b-1d1e-4fcb-b584-a106f08cbb83","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:13.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /ws/f8edee8b-1d1e-4fcb-b584-a106f08cbb83 HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://fxcoinb.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ov5bRBbLE7bftJqvNYhszw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 24 Feb 2026 16:09:14 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://fxcoinb.top\r\nAccess-Control-Expose-Headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GGJQ3P4gxFwxRVuDAJLxFQilBR8=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":0,"dns":1,"connect":318,"send":0,"wait":261,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T16:09:10.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-149e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5278,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"0d95dddb0381539264e98e68f59a9ca2","sha1":"ae0a1bb3f6bcb19f3be44ce52beb403e8c2fcb6b","sha256":"cff72579a5453a1616cdf36765455ffc3e00aa3a3ebb0ec8cc66ed46f5d1354f","sha512":"9c25b415600ab651416d507bae871bf3742871b86fb33c753926821eca9df8bb287964cd6e660f34411327878aa19583a0362b8d0c74531d2a6cb51ddc8305c4","ssdeep":"96:Tr82lL5iKuc67CtESt/KHr6TCZydHRH/gR2mUsGKAiowGbuB1niHTiHXH/w:TFp7676aZCxf42nfD3bbuB1nizi3fw","tlshash":"06b140b36db0d86a2366013babdbb4149e6151a3862a5854b0cc90ed8fd1fd5c8cb7b1","first_seen":"2026-02-24T16:00:34.596304Z","last_seen":"2026-03-02T14:19:35.088762Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":554,"dns":41,"connect":253,"send":0,"wait":253,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/vendor-BX8X2Xpv.css","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:11.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /assets/vendor-BX8X2Xpv.css HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-16d4b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93515,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"e8271f77be156adca3434a353b449e08","sha1":"bfed440065bcf34c7f2847aefd57af53ed35cc3a","sha256":"28b9762f37b383e09106f61843b8a673709071d24a775236076cba5206a12dfa","sha512":"b55d18906437e015230edfc40c0658f5a915aa0933eb53e4944fa8cdc6415926df113236e4e9dd8fd289831ac9d9ea628ce6e33514b1808b4d2b6730ec3bd715","ssdeep":"1536:2fIyNBi3MFYaQj7FCwsBlDOFIxuVoxpDo5i:2pNIClDsIxuVSpoi","tlshash":"9993c4a5a9c461fc6f2ae2659b8765d8f13cf670cc41daa0f106511d0fcbbf60613a3a","first_seen":"2026-02-24T16:00:34.592662Z","last_seen":"2026-03-02T14:19:35.092156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/vendor-DswlOrQU.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:12.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /assets/vendor-DswlOrQU.js HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-ddeb7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":908983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54255f41ab432c4747879d57f0b8c57d","sha1":"4a9295892fc282641e655db49ee3e62f8bb12ded","sha256":"27d96a333d573bc91c4a20e5d95346aa8f4d3a16101947ab155190d849127024","sha512":"4784918a8f8fdc01bbdc482db6bb6929a078162ca62b522e1e86c2e72e80b83a6fd797d8fdc42d2b387e166095b5185a7551ca24d4a17f1401826d4ad4b0f6da","ssdeep":"12288:iPGdqxnISWCiFSZU+QVDX/GpShekcgZ3hrK24oySWz7NC+np2bBX:iPyqlFrikJcDsjy3hG2/ySWz7NEt","tlshash":"39153ac97292f06147ab60e140bb1006f3396e59740e84a4f16dd8eb7d6ad89e277f3c","first_seen":"2026-02-24T16:00:34.600026Z","last_seen":"2026-03-02T14:19:35.086864Z","times_seen":3,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/vendor-DswlOrQU.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:13.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /assets/vendor-DswlOrQU.js HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-ddeb7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":908983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54255f41ab432c4747879d57f0b8c57d","sha1":"4a9295892fc282641e655db49ee3e62f8bb12ded","sha256":"27d96a333d573bc91c4a20e5d95346aa8f4d3a16101947ab155190d849127024","sha512":"4784918a8f8fdc01bbdc482db6bb6929a078162ca62b522e1e86c2e72e80b83a6fd797d8fdc42d2b387e166095b5185a7551ca24d4a17f1401826d4ad4b0f6da","ssdeep":"12288:iPGdqxnISWCiFSZU+QVDX/GpShekcgZ3hrK24oySWz7NC+np2bBX:iPyqlFrikJcDsjy3hG2/ySWz7NEt","tlshash":"39153ac97292f06147ab60e140bb1006f3396e59740e84a4f16dd8eb7d6ad89e277f3c","first_seen":"2026-02-24T16:00:34.600026Z","last_seen":"2026-03-02T14:19:35.086864Z","times_seen":3,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/api/common/getAllSetting","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:13.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://fxcoinb.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://fxcoinb.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12007,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d54009a16c5fdb108c0b7f844a0b5894","sha1":"82ee65617e6ceb5764a63b2afbc8765ba3992f2f","sha256":"8bc17263075ca5ef91c5526f177513d3f3806ee8a67be677077ded4eacc566c9","sha512":"dba7b39c9d0f72b063ad144f8356fff1df9557706c9c21381cb503e7e3e1cd24043161174c580e1d34aa46c86d428973ba3530e7a5b81c0845c49afd8d9620d9","ssdeep":"192:NMZlLaWSgyR4s6+Iq3uc2hZKx3wPjNa+iZNEGAZwOHeYqs0VjMvz72sTrC5MNk/r:NuFPv32tMA+ISW","tlshash":"284232893ae8cc7d52c716d1c9d77a8dbadc3c73e8889c4ae167ef1cc596630480e51a","first_seen":"2026-02-24T16:00:34.603752Z","last_seen":"2026-03-02T14:19:35.104831Z","times_seen":3,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/platform/dev/logo_144.png?2.0.1770478002926","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:13.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1770478002926 HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Oct 2025 07:49:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f73b1a-3c54\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"b16d8ebecd8efd6987f59c31277c843c","sha1":"95c4b53e5f3872dd08227e97f136f3f7521cc622","sha256":"c7978f7ea1d7508ebc38144de0eaa91e5b670bb0968ae8b1215e43a579c99e79","sha512":"31f738b0c4ec6cd672f3c036a5d8dcf2d601002f6769b18240e3b71a8d65ef0c16951612fd3d34593fc38691cc04d8e3f42bf3192fe366cfeff8a5bae8543a65","ssdeep":"384:lq5xXhmxeN2SbbotTmVDE0BRBwMgDhqa0jJlv5/qckGg:lmxXhtvfjVDEcRBRgtqa0JlB0N","tlshash":"ea62d048e2351992b5fffb92756200a9ef53f9bff1892d57108a4f4249c6d24e220c9d","first_seen":"2026-02-24T16:00:34.583909Z","last_seen":"2026-03-02T14:19:35.087861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/api/common/getMt5Amount?coin=xau","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:14.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://fxcoinb.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://fxcoinb.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"881585723b7e3a6dfc69c2345dd875c1","sha1":"4859200f58cc92e9756969d7ff6e244626772a16","sha256":"0b21d67a4610889f82f94f31c17a612bcb3c962405f3f96047a237689c61fa56","sha512":"2b0a5ad2cf835bd2b79727ab8c81acd2d75496ebc863b9a1cb795bec6d01fc11250c97eacda6e8a4110b1d3f2b32336bc6a53d743534528945b294dac0b3a33c","ssdeep":"","tlshash":"319002556d188243b88708a5d5071604002431a0362992484c995125c18c262606085c","first_seen":"2026-02-24T16:09:38.898054Z","last_seen":"2026-02-24T16:09:38.898054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/en-YERpUf3j.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:14.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /assets/en-YERpUf3j.js HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-afda\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45018,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44995)","md5":"4ab8b76ffb8e96964936ed0dfff10485","sha1":"a3cb8b3b30193f4df7b9043ae8674a65baa06db0","sha256":"4fe37b48cbbe5c064951fe5e096a732da6e1f7b36cd0ed304bcbce9e9323a0cf","sha512":"d80682d648e6580661f46919a8d69eaab0118b2e166e14efae5be7397d51df64af4112b1aa0f1fd22fe1f71a067ae4d236f638c664a88a7c3a20d252218ca636","ssdeep":"768:KGtZcEw/o7rWhKxsUinAMCtQriaAMFBoP6+ksPG928mwOUfpk7aOGxzip+:uponWhgkEtQrXFB9sPW2TGxzn","tlshash":"bc13e8893e1a98da04f3536674ce6e1120f50ac2c256881f4fedc9fd53d2b67a367a34","first_seen":"2026-02-24T16:00:34.594797Z","last_seen":"2026-03-02T14:19:35.066239Z","times_seen":3,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/resource/images/light/nowallet.png?2.0.1770478002926","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:14.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /resource/images/light/nowallet.png?2.0.1770478002926 HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Oct 2025 07:49:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f73b1a-8c14\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 356, 8-bit/color RGB, non-interlaced","md5":"a3877c3de6991724167020f4746cd343","sha1":"96568f8b5ed09a56ac2f9fece74d54bc7629d57d","sha256":"e63c8b25303ff05fad80631688c5638be2edd6c29bc8b92670ba4780a8fab25d","sha512":"7aeb267846808fa244c76e55be3dc5f337bfc6d8e82b6e1a5af73553985bf6e4b3ca6e26064c94bc8cd227bebb3bdb01ba46dc534cabc90ebabf488ef3569cea","ssdeep":"768:/N1IBFqG0kSI5ta4rUSlWUbsylujjXL+GFCTh:/NCqTkdECAUIPXSGmh","tlshash":"18f2f102fe7af081f32ce1f3a5662f77562e111ddf86e62672dad45e01011b62b91c8d","first_seen":"2025-04-13T20:28:04.816981Z","last_seen":"2026-08-10T18:16:48.730041Z","times_seen":52,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/assets/index-C1f18xL6.js","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:11.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /assets/index-C1f18xL6.js HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:26:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698759b4-1c317\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59209)","md5":"b160cbbdb558a6f069d65a9ce6822bbe","sha1":"949b914a12ab687ffb5e50f0a2095a87c63d3a61","sha256":"7de1bcaa95424ff5ae61a696f6bcc0c344382edbfef14db64218abd639f1ea6c","sha512":"c7555116b6be2cd66801c3a2e58a5a5c5a23ea6acf99ab9bde9dd3b0aa25ca8a17ff91c76071c420c24d47b620430f86a4ec8229cbfc08c36e7a2f13946219df","ssdeep":"1536:ZtA6+0IQwVslXSFpbEXjPpzyVGiFxwb3nY4UnqpZ6phNf:B/xzylSTUnqK","tlshash":"e7b37e46950b4eff29fa0a542a97291030640fd6c54ccc67b76d6f192bb6c9ca31fb28","first_seen":"2026-02-24T16:00:34.573682Z","last_seen":"2026-03-02T14:19:35.08962Z","times_seen":3,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/api/common/getCoinList","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:13.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://fxcoinb.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://fxcoinb.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31045,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (31029), with no line terminators","md5":"0fe30fafa749914cbcb5507f7026c6c9","sha1":"38f85b7c0460f9877cd159df8e202578d30cc743","sha256":"6a9ece01dca3d22244f2b9a542d86bbcfa3d82a7e81d5a84c5cf787506a7661d","sha512":"279779dff18be4143cb15b38217c85dd42b9c0e39817755de758e47c31beae0ba51f6eb674d9c4e87e9c5210947a53df20131a91e45e3377250c90f92421f1f8","ssdeep":"192:VX4NXW6KXJ/h3X43kXo0hXPwXP9hX+ZXQaTX/4XZVbXe0X/+1XoEWXXYXgZSXWvj:kKYWZFURo6NIeb","tlshash":"37d26385663c55bdc57981d11faf7912b2cc356facca8d1ed3ca4c888ad4ab0260ef07","first_seen":"2026-02-24T16:09:38.901251Z","last_seen":"2026-02-24T16:09:38.901251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/platform/dev/favicon.ico?2.0.1770478002926","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:13.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1770478002926 HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:13 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Tue, 21 Oct 2025 07:49:46 GMT\r\netag: \"68f73b1a-3c2e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a5fba41bc492f028a7092d1e82e55312","sha1":"ef9e5e7a284911901460ee436d2cdf12e31e2f6d","sha256":"97a8e85f7f6a721a6a68eae86576eeb629f57d182aec09247ecc674f6d6cb3a9","sha512":"1438114643fcfa6a5878cdde0b24c7c50bcd678afb7a2ba0a61af384ca179e345d36aef82bbd423e55570e5ac437114086832e9444ee4f2ed970205a277dfd5a","ssdeep":"384:Fmn55zXf4AfPUEbTyzcJw80mM7Jl6+np:Fm55Tf4AfcSTyzcJw80mM7Jl3p","tlshash":"a662018289890144ed6c5fb6313a9cb41adbbe65bdf8f25e8d0574d32bb32d39721803","first_seen":"2026-02-24T16:00:34.605174Z","last_seen":"2026-03-02T14:19:35.076112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxcoinb.top/api/common/type/defi_activity_type","fqdn":"fxcoinb.top","domain":"fxcoinb.top","tld":"top"},"ip":{"addr":"103.209.129.195","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxcoinb.top/","date":"2026-02-24T16:09:14.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezsdibvgfi.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:00:56 GMT","end":"Fri, 22 May 2026 03:00:55 GMT"},"fingerprint":{"sha1":"E1:B4:99:0C:8C:8B:50:B1:97:E7:28:79:20:B7:B7:FA:9F:BB:85:25","sha256":"88:96:3C:3A:6A:5E:89:7D:04:18:B8:45:48:5B:1E:AB:81:85:12:26:94:1B:0B:20:68:A6:18:00:3A:57:C5:AB"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: fxcoinb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://fxcoinb.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Feb 2026 16:09:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://fxcoinb.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-08-10T18:53:05.102611Z","times_seen":805,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"fxcoinb.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}