{"report_id":"eb36a990-b47b-4966-913e-dcb9657638c3","version":0,"status":"done","tags":[],"date":"2026-09-29T04:48:46Z","url":{"schema":"http","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"title":"Cryonchain","dom":{"size":27917,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17494)","md5":"5c98f916f746d7c365fd13d87e391c7e","sha1":"f375bf9acfe57b54fcad46daa0ad6adc7a8696e4","sha256":"e02aa1b7b06985a40188ff407b652ecde3c878c2a77181d91e9442785a631dd9","sha512":"86c0e53d3f4127ea1d9cf50e4f0cfb7fc0435670f800708eb2695e1d721238875a9959613c41a91f8dae1e796152990cbf8f6502ec69e53c4b2e3f91a663d76f","ssdeep":"768:eQeQxb250b0h0D0X0OU0/080/rMZUpLFYeb34:eQeotoCQEO/sn/rB0","tlshash":"8fc21061a59491a213b3d5c4d8e0bf1a7663fb0f80da88847fac40d44fe7db4f96b861","dom_hash":"domhash43a4a10fbedffedaea8eb63bf6fba6c8","first_seen":"2026-09-29T04:49:19.937796Z","last_seen":"2026-09-29T04:49:19.937796Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T04:48:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bithumbcc.top","ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":31,"received_data":2719622,"sent_data":14349,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.cryonchain.com","ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-11","domain_rank":0,"first_seen":"2026-09-04T16:08:56.21217Z","last_seen":"2026-09-04T16:08:56.21217Z","alert_count":10,"request_count":12,"received_data":5264,"sent_data":6592,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"cryonchain.com","ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-11","domain_rank":0,"first_seen":"2026-09-04T16:08:56.214734Z","last_seen":"2026-09-04T16:08:56.214734Z","alert_count":30,"request_count":30,"received_data":1463158,"sent_data":16293,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bithumbcc.top/assets/vendor-c1a9090e-w260813.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5862faeaa5fb0c031efaa073123364b6","sha1":"3d3636ef6d6e2dce64a86042d2a42a0d61d79fe8","sha256":"4e6cc6ffb848fb5d24263bc5b06073c54cb1861b8e19920ae92a61d43b30bab5","sha512":"b1129c7ca922f3e67082daea4f35dd9c10cf0d02113119b2f0d9f44392e69e0a71c6ec6a0968c2b1d9d926f322820e277b385d235af3bd55cbf0c491e2bd6206","ssdeep":"12288:m+TB4dhcXC8WEYB1ILQLDHx8wdoQsGHRIWC7+WKwLiovNbHVQwyVejF:m+TBDyClLqx8wdnsGHw7+WKwLi6Huw6I","tlshash":"d31529c97692f06147ab20e250bb0006f3396e59740e84a4f16d98eb7d7ad89d277f3c","size":929032,"data":"","first_seen":"2026-03-16T14:41:33.292583Z","last_seen":"2026-09-29T04:53:07.677469Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/disabled-feature-guard.js?v=20260921","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"89468c1356a4ef2e8a0369db88d2fefc","sha1":"d2c0464dce6a8c495ded68924147df517fcaa4fe","sha256":"373a19132e5925c78964b0b9f67e43716db8abe747af21a73b96b86e83c6b86d","sha512":"f40dbf893f46c8a6dec619b7bc19a9d8ac4424f053837af134f6ea8c2cbd45868e5f518a5a451a6fbbf90af885bcfb8bfd93818cea697953f8ddd12b7e56c820","ssdeep":"","tlshash":"b7f0c0681006d03b48d7a5ebc260a3f9f932203fb8d6f0e60d2c558a2c9bd5627708b8","size":545,"data":"","first_seen":"2026-09-29T04:49:20.004126Z","last_seen":"2026-09-29T04:53:07.686479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"4c01db767e8721a85da8d9ba13fced0f","sha1":"79f0989128563d626214d9682800260c34e2c0ed","sha256":"39280019b8cca3d326042eb732bfd307f6a7f7e9a60873ac92a0683796d36541","sha512":"03dc8e9a8a1fc5f835b1963094a83dfc50cd94c3c8a6a54b83f4f7f0af7e0dffe542681e9314d8f8be464cb03e6043f2b161898885029cb9606699728a7b8ee5","ssdeep":"","tlshash":"6cc08cc4a0c22e106602641010bf38e49034442674481b028c94d8582e230f08233edc","size":140,"data":"","first_seen":"2023-07-15T21:13:40Z","last_seen":"2026-09-29T04:53:07.753553Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-09-29T05:01:14.329831Z","times_seen":6402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T04:53:07.754051Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"62695eea087aebec6ade4338a4d0c9fc","sha1":"b7ca4faa4612aa48aa7dcd81cc52b92a5ab64c72","sha256":"d07f0a69adef200a27d6e5d9401a80825098b7caae2e11773044c8c11e9c02ce","sha512":"e76974b29afbbfff0ce87c09630b861413dee256eb66ec1b0eb3d4da0026c1b1167225272e3126980fad23543a9ec1d3e015d76824e236fbc3373b7d7ae4c748","ssdeep":"","tlshash":"0f11abfe191ab0296303404e976b79016422a0b9000a184173ccea9dbb9ab6dd0cfb8d","size":1034,"data":"","first_seen":"2026-09-04T16:09:17.824948Z","last_seen":"2026-09-29T04:53:07.734634Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-10-03T21:59:20.295294Z","times_seen":49363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-10-03T21:41:03.288014Z","times_seen":50614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"92f5b92b5e937d0716e65e466236986e","sha1":"73e2afebe630a3048ae9d0badee43b583f62474f","sha256":"0474e13b83636236c6fe06ce0faf179c1ef340f4265bf0eb0f44d278f6515483","sha512":"89de394e9b29513a201b036cc47fe4bc20909d72a81d43d5e2a365b4b60f4901ae0b58762ccf4e55bfc679729560f3ea869a2d439da9212068de1787af69145f","ssdeep":"","tlshash":"0de0c0e3b0c90025235bd47a53370084303068729ec2f1d8484a38f09824fd9503bb8f","size":356,"data":"","first_seen":"2026-09-04T16:09:17.828665Z","last_seen":"2026-09-29T04:53:07.736903Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-08fd707b-w260813.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"759b7a4df1b69fc72331d0a3e06f3541","sha1":"29958f531ee0e9d846ed47091b4e847229b4eea3","sha256":"113680e8a4fe7cc5b5fb0a095a00d66b221acb3bdf9fe19bd1c66cb199583586","sha512":"cc09e704d34ed27986e9328725665718dcde73349138fe43f35a6666b7d4ab7bdf13d0197206d16ce871a9e47ec8a3a63da0f85cd7ad61e606b1eabf6620c033","ssdeep":"","tlshash":"d601dcf9fd5cce762fa2186052902a45200d5b9dfe2025e248573e6427a9960c79e72d","size":762,"data":"","first_seen":"2026-09-04T16:09:17.744712Z","last_seen":"2026-09-29T04:53:07.715314Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/kline-2c584c1b-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0be3923f88d8d00a93a29aac3ea0b35b","sha1":"1d33ae957141e7973803b148f4ef1067c941d661","sha256":"ff185c0789c106ea5a3c2a8bdda1558f13ba6f8aa735063fdec31b4d900e0afb","sha512":"95d57047a124ec078f06e6cc62b11324e4721a79ccb18792e2e623339ea99e4c409c306f7a1687bfd3a2b11b0b2019b655eacfa964889c0a616f16d31d303b81","ssdeep":"","tlshash":"a3b092277bb122e082789cf826e47d01467018ac53735a86c2480101caf62f2c1dfd01","size":129,"data":"","first_seen":"2026-09-29T04:49:20.050541Z","last_seen":"2026-09-29T04:53:07.70608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-10-03T12:43:47.117843Z","times_seen":7620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-29T05:01:14.333025Z","times_seen":6292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.795131Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-10-03T02:47:11.949799Z","times_seen":7280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-29T05:15:58.779256Z","times_seen":7295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-f5aa06a9-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3177e28c5b3da46d89e229267a0115f","sha1":"971ac727a382026a389e583debb540c8df342e4a","sha256":"598be0f161bf62999d995ca7bdf2883ef288bdc91e4a4efdf99ebe972da7886a","sha512":"7dedf47c20ac873339634929fc58ef316c1fc6ae6404ef11bca77cc34096839548d4fc81b1e3562a415cd7c6cecc75c9a1df17c32e8bd5c3ba40072fc1215dc2","ssdeep":"384:e2HuKWZYuKFPn1WGMHKC5YJaA1mZ8LMS+eOFiGJZvfJYoH0tzpMHjMoLN2X2ejeV:e2OKtV1XMH556NQMMgqiOZvfJ63K4oeK","tlshash":"5d72c859f507593cf2baa46110490000722dbfcea00e8df2b5bd5d866767eacb799718","size":16654,"data":"","first_seen":"2026-09-29T04:49:20.039988Z","last_seen":"2026-09-29T04:53:07.703699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-03T20:29:14.989714Z","times_seen":15559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-10-03T20:29:14.990211Z","times_seen":2009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-10-03T08:35:44.58566Z","times_seen":932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"4211cc73cf63c90155fb5166a03dffb6","sha1":"52db53f0b3517afe9925a38eccb28d6a91df0143","sha256":"7f84dbb079fd2cc5ec9f3248acfc0f4baf63a225014e2304c13bf2be21cb75c6","sha512":"049b66e3e284c954ce457ea7b9f5a0f47a626f6ecea3b11ba75956db63d9e5dc87f9f1e807f27aa3c30fef16ca1e7479f8156d803ef9d86ff514a0f2921c9556","ssdeep":"","tlshash":"efc08cc4a0c22d201692655410af28e49028406ab08c1b12ded8dd893e224b4933be98","size":149,"data":"","first_seen":"2025-03-08T01:47:03.646541Z","last_seen":"2026-09-29T04:53:07.74747Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"fb2ad6fbf558d006be1faef6465ffbcb","sha1":"6c217d3b153d4813c5690c11582376bb8562c26e","sha256":"3de5f332589e87277ea2a5ec216e1c703bb4f9a0349499cf837d4760d5cbb55e","sha512":"8b0f5909af93366f9eeae818885b9f84d95ead31d049bb178b8cb856c51a1fc77d9082c1dff16919075b1e42e42ad570001f67f6dee0d2d8dd9fcbd464c0d0f0","ssdeep":"","tlshash":"dcc08cc4a0c22d006602641120af38e49028402770482b028c94d8482e220b08233e98","size":137,"data":"","first_seen":"2023-12-21T09:30:10Z","last_seen":"2026-10-02T18:39:57.148309Z","times_seen":1303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-10-03T08:35:44.600275Z","times_seen":10452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/account-avatar-260921-ethfix260925-xauorder260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"567d202c43951ed59fb122cf656059cb","sha1":"5e193ef54bd34399562cc2c05ed27422bd07d6e5","sha256":"5d49e25e4105766fe03978b058d2a83690d59fa0a49f1cf057729b598b88a243","sha512":"951eba487c67895ccda462f6ef464cfbdada37082c2076661a7280fb15a59eee26731c5886fdbdc89f97d7322250fc8999cba7839d608397aba240994d70e64e","ssdeep":"","tlshash":"1171d6d171a130bb86d238f7e5aeb65432726184b042d192da3c8ccc6db9842177ff9d","size":3747,"data":"","first_seen":"2026-09-29T04:49:19.998258Z","last_seen":"2026-09-29T04:53:07.681332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/public-market260926d.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"0555e1a1740d552d5d2cf98fbe2d3c46","sha1":"aba4114e4a727b0b2e5c8b4d7e23de43ba40f297","sha256":"b52256bb9342fbd8b87f5cbf6f1f1875f81f47d563b1c405c9425665a4b1f83c","sha512":"b2feda9c44357289b4ae3c2cc23664142236ba6ae7a205b02c97a955153f51fffb60604acd0b8c6cc42e6805a4745fc06306538c2cf1bdc799a0a139308c2f8b","ssdeep":"","tlshash":"23814880e353122805f34078529b53a2b59d551b348bd4c17b1d8f922fe3a16c9feb6c","size":4014,"data":"","first_seen":"2026-09-29T04:49:19.945748Z","last_seen":"2026-09-29T04:53:07.725387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/en-d2da2ad1-w260813.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"29c3b5ec206a320048bf70367525535a","sha1":"02058f60e3ad10f7bd041ced990895d59ba38bda","sha256":"6d1a0d5e0e32378e7b3b6478582ff1d62cd6517246721b0bcbd1ee9ae00907a3","sha512":"6318f691804294b3a3c4ba1881a2849732e9e92fa185d3bb07fc1c748e2d9cbd8b58104fd11a9719de55b83a47cda3693abbbfa5334d4df87312a6339f3e78ec","ssdeep":"768:QRtZcEw/o7rKOdAAWihnAMCbrkaAMxVoP6+6sPG9J1mwO6Ypk7aOwxj:pponKOd9nEbrZxVLsPWJbwxj","tlshash":"e913e8897e1a999a04f3532774ce6e6120f60ac18255881f4fecc9fd53e2b67a363734","size":42658,"data":"","first_seen":"2026-04-10T14:31:13.613077Z","last_seen":"2026-09-29T04:53:07.709746Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-10-03T20:29:14.994335Z","times_seen":8080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:01:14.329327Z","times_seen":3827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"bbfdbe498eceeae4b8955afded5953f2","sha1":"8c751893c399c81cfa90910f797e551c903f6f03","sha256":"58b8d2d45f5c38007fb9d52dbfa22b0e70b9fc6eed0dde5c96f3c600a54c387c","sha512":"2ca782e375b5aea7b15ef61611be19449f3ae3efe35807414b2efdce77c2250741e4efc0b626fe817be0c8ff1e221f8a3f95e7bd9306ff3ac87b930c510077c9","ssdeep":"","tlshash":"84c08cc4a0c22e105622641010af28e89034402674489b528c98ec4d3e230b09233eac","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-09-29T04:53:07.739145Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-xauall-upload260921-ethfix260925-xauorder260925-xauorder260925b-xauorder260925c-public260926d.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3159a60ca1d6daf17bd43bf22310c1cb","sha1":"f1d7c97ef85278dfe9ba4f6fe94b8d6605437b3e","sha256":"40ea0f3173c84240115ed92cdf566267a99e023141fc7cb497f11973b782e00d","sha512":"59f4d40bf6488fbcd8036e26888af2a5df63f3a51d4e5e9b159ba3d18cf574c55d2956577d1222af667e542109f3e66336ac4dd8be8afe5ec09df4b18181c005","ssdeep":"1536:eV9MlugluYluiOMwc4Z3046GMfOjUP3IFm:k9MlugluYluiWMfOgvX","tlshash":"bcd31946765526ee97bd8cf85aa73b1021740dcd807688cbf79c4900afbeeb0d1eb605","size":130324,"data":"","first_seen":"2026-09-29T04:49:20.066841Z","last_seen":"2026-09-29T04:53:07.705448Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-ac9333da-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e1f075ec81d27822b691945201c2d8d","sha1":"0effed56b2e79c1a29948c243cc1b11d48d9e9f3","sha256":"a5c401e5737d4e0462ee4ffe537e5df148bbbfbb5e6e8f4dbe73beca05a6f209","sha512":"6eb0ea0398836f8d3e1afc24d42c7ed29f612c604f56a6bdb3cd8c1a7d5bbabf413b1667369e655272b85c3153593dc9f981ea391e305c0a29107a8c075be247","ssdeep":"96:cCTwwNPBfsnYZKqD+wHoUBPgehYwb8Vxk0WosE3hvyqEerA3XxB/Ej8:fTwwNPBfAYkqiwHVtgeuwbi0MhvyTXxJ","tlshash":"2d91a949f80284feae7b54d148552422718c3fbab22488f6f2fedd17637587ad741711","size":4499,"data":"","first_seen":"2026-09-29T04:49:19.967416Z","last_seen":"2026-09-29T04:53:07.699215Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/charting_library/charting_library.min.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-10-03T21:29:34.45049Z","times_seen":7396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/filters-37197317-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5bcbedd345579b7fb52e2ad76c63832","sha1":"4d998eea0dba27b0bcb20a369867a323e1a1a6e3","sha256":"76d1c818694d390371c9541776adc48ab1fae564fae13156f5ad27a46c7341f5","sha512":"32af8ef707d3be6dbf5d968a89b5f778dd4f81409c48eaddf9376a9de6cf4e07e82eac221b95b14dcca78d65d8406b1841853fc8b1dcf85f95708d2b35ad3731","ssdeep":"","tlshash":"fb6145fdf8d3617386e969fd40288014b18ebe14647e0b89e55fd0816973888d0bf738","size":3272,"data":"","first_seen":"2026-09-29T04:49:20.000505Z","last_seen":"2026-09-29T04:53:07.730726Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-09-29T05:01:14.341079Z","times_seen":6473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"df55055f75e2187c0c3ffd3298e162c2","sha1":"dc0db5a52df96c5c7636f6c0aef602a6ff8d0042","sha256":"34d238e0facf0645b79ceb771e2969c69c252c99e63f22e7fcd3dcfc6d7ba0ff","sha512":"e903ff7edc9a3fe9051dacfd58d309f38e5f7689fa9749821e071171fee8dded977be371a8cfafd49c12a8e2501483f77fa64b0e732c827d0b5c0cca892cd137","ssdeep":"","tlshash":"4fc08cc4a0c33e102656641054bf25e490244027b0481b468cf4d8493e630b08233e98","size":144,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:01:14.32884Z","times_seen":6042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.789987Z","times_seen":1150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-10-03T07:45:42.886192Z","times_seen":7694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-29T05:15:58.784045Z","times_seen":7045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-8f0772e5-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7be4de96fefd78e445d4ebb48f6791e9","sha1":"83f4e3534d4fb0e7b54c76c1495642ace96be35e","sha256":"94efaeb52f75b61d80c1e6b79d0b6562bb285b6b90dacae7b07f0f36d7845eb1","sha512":"84c4cccf1d8c6937867f377097fa6bcb674441bbb6f5b3d463e77f6581b221b66838ddd5fe9cddadc31fc2f4bdff31005a9eb645497dd7b7067e83229a97b309","ssdeep":"","tlshash":"e2f0e12f7a7980b157b388f8a2a33810a6180b492671c5d8d5860a00cb789f3d16f614","size":569,"data":"","first_seen":"2026-09-29T04:49:19.966424Z","last_seen":"2026-09-29T04:53:07.688372Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/currencyItem-3b00eedc-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bfd70fb78c98bde26156c61ac35f8c0","sha1":"ad0230b611e3a5155468fea3514ff7c1ad85a041","sha256":"5b6f9f8836ca55f402ec250eed0f1d46bceb339e59d8fc160db5dcb0d555d518","sha512":"4aa155fcf888f46f8dca54724d84b0cc2560dfafa8f6771f25fdbabc0fcde1f267ad237884f020cb0017689429155dcfb4abf4f8551babb47be0818e8611b123","ssdeep":"","tlshash":"b531bd8a9e04c3f1c3bf906294b91414521d7bca70618986efee24947bd75bcd736a31","size":1521,"data":"","first_seen":"2026-09-29T04:49:19.981562Z","last_seen":"2026-09-29T04:53:07.727917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-09-29T05:15:58.782679Z","times_seen":6962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-29T05:15:58.793422Z","times_seen":1151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/#/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-29T05:15:58.778439Z","times_seen":7590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bithumbcc.top/assets/vendor-c1a9090e-w260813.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.203Z","timestamp":1790657290203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/vendor-c1a9090e-w260813.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Aug 2026 07:24:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7146-e2d08\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":929032,"size_decoded":305836,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5862faeaa5fb0c031efaa073123364b6","sha1":"3d3636ef6d6e2dce64a86042d2a42a0d61d79fe8","sha256":"4e6cc6ffb848fb5d24263bc5b06073c54cb1861b8e19920ae92a61d43b30bab5","sha512":"b1129c7ca922f3e67082daea4f35dd9c10cf0d02113119b2f0d9f44392e69e0a71c6ec6a0968c2b1d9d926f322820e277b385d235af3bd55cbf0c491e2bd6206","ssdeep":"12288:m+TB4dhcXC8WEYB1ILQLDHx8wdoQsGHRIWC7+WKwLiovNbHVQwyVejF:m+TBDyClLqx8wdnsGHw7+WKwLi6Huw6I","tlshash":"d31529c97692f06147ab20e250bb0006f3396e59740e84a4f16d98eb7d7ad89d277f3c","first_seen":"2026-03-16T14:41:33.292583Z","last_seen":"2026-09-29T04:53:07.677469Z","times_seen":124,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.885Z","timestamp":1790657296885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":453,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/public-market260926d.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:11.464Z","timestamp":1790657291464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/public-market260926d.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Sep 2026 12:15:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab7b74d-fae\"\r\nexpires: Tue, 29 Sep 2026 16:48:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4014,"size_decoded":2039,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0555e1a1740d552d5d2cf98fbe2d3c46","sha1":"aba4114e4a727b0b2e5c8b4d7e23de43ba40f297","sha256":"b52256bb9342fbd8b87f5cbf6f1f1875f81f47d563b1c405c9425665a4b1f83c","sha512":"b2feda9c44357289b4ae3c2cc23664142236ba6ae7a205b02c97a955153f51fffb60604acd0b8c6cc42e6805a4745fc06306538c2cf1bdc799a0a139308c2f8b","ssdeep":"","tlshash":"23814880e353122805f34078529b53a2b59d551b348bd4c17b1d8f922fe3a16c9feb6c","first_seen":"2026-09-29T04:49:19.945748Z","last_seen":"2026-09-29T04:53:07.725387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-home-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.804Z","timestamp":1790657296804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-home-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 267\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-10b\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267,"size_decoded":539,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b618cc4a9a7e5cd16954c63160fadae3","sha1":"62741e8eeb1a799557b6251590060c3a0d0c1245","sha256":"d54d3b717ad16481f606e1bf6b284be59d43f7de5cdfc8115e06dc14de50c8ac","sha512":"be97554339a96d0c34b8680bfb5007e4a97ec007fa5776a807be34eb6b8c667e139222576b844f76c63f3af328a861bd2d02fd3bf9e5b1925918624b6606e716","ssdeep":"","tlshash":"e6d02b46620c8c1cf6394721e668317e003901c78a0c5029e4a1113192086afb837b6c","first_seen":"2026-09-29T04:49:19.948095Z","last_seen":"2026-09-29T04:53:07.731747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":173,"connect":280,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-quote.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.814Z","timestamp":1790657296814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-quote.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 261\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-105\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":533,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64ba33442ae610e74789899af3fe748f","sha1":"b3068cd61144fd820e632fa674f1d270eee05e44","sha256":"7f60aff36b1b8635defcad779065f1889fb63589642856a1749bd29b8530bca5","sha512":"e4834e9a666d8af82cac2c0011dbaf9959de1914dc2dd0b2e631935c6f1fa2d2c700aa771c5b1fbb72b8b05be5a94d97588a5a0a38800ebf9b5a3befce335710","ssdeep":"","tlshash":"71d02b1562044c1c75220621d7a8723900290192094c1128e4e11135a20555fb837799","first_seen":"2026-09-29T04:49:19.950132Z","last_seen":"2026-09-29T04:53:07.729114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":164,"connect":271,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.883Z","timestamp":1790657296883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":453,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/banner-premium-3.jpg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:17.484Z","timestamp":1790657297484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/banner-premium-3.jpg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 20 Sep 2026 17:09:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab0134a-44c0f\"\r\nexpires: Thu, 29 Oct 2026 04:48:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281615,"size_decoded":281491,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1730x909, components 3","md5":"514aa52835231f873167e41c24b78de5","sha1":"ae31c9c05c9c49fb96ac015084469b951e9dbdfc","sha256":"5d2b671369abd963b867f90fc048b27a53d53b2d6c9c69d97804653cbe75b4df","sha512":"e2854df88aa827e136cb402f4028df9466f55ec13d02e16f20feda7c8f70ad6ae8b15aeafcacd6907e9897cbc155fc448c0a47c5b45b0f032cf475374cd695d1","ssdeep":"6144:nfrE8rB1KJYiyvn6xTt2n+JHaq+2yk5cUIRRotZ6z+RWmQh:nfrE8rWqE+q6qf5cUIRCuMdo","tlshash":"395422055a364bbf8ec386f1351d0929cc792ce125035218a8a4fa86bd6d5f7ac3726e","first_seen":"2026-09-29T04:49:19.951824Z","last_seen":"2026-09-29T04:53:07.729991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/banner-premium-2.jpg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:20.514Z","timestamp":1790657300514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/banner-premium-2.jpg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 20 Sep 2026 17:09:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab01349-4c1f4\"\r\nexpires: Thu, 29 Oct 2026 04:48:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311796,"size_decoded":311889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1730x909, components 3","md5":"fbb17179c5b64a72f2b53faa56837124","sha1":"3c3c3922037a14a852ce72d6bba28f690bdb742e","sha256":"9fcb333c837724712e4aa7e097902365bb3a1e4e1839c7bdad40eafc67fa3771","sha512":"36c4e6201fe442979ddcbc137c9bd5817145b424481ed6571cd3d507edcb65bbb44e63815bbb6ebf823acffbeb749faa11b8c0dd7feb61f07b1b17a5b78ab242","ssdeep":"6144:UnA4iCwFXTH7TDsTs21Fth/vqWpuC+SfNdSra9VJuX67G3z17ElB0:UnxsFL7+9H/vuC7dSW9V+6KD17Elu","tlshash":"d86423ddab378768f8a205e745eb4c40ad50c4c6b0c1ef3d5c8b3f6b12455536a3a70a","first_seen":"2026-09-29T04:49:19.953214Z","last_seen":"2026-09-29T04:53:07.683463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.cryonchain.com/ws/9a91c7d7-0007-44ad-a6c4-7d4657a5fab1","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:12.460Z","timestamp":1790657292460,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"GET /ws/9a91c7d7-0007-44ad-a6c4-7d4657a5fab1 HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bithumbcc.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pIAsqa3s+xySyIlsouUPMQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 29 Sep 2026 04:48:14 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://bithumbcc.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ndMdB7DQU/Ds1KjHPSKton4J+wM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":443,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":2578,"timings":{"blocked":-1,"dns":843,"connect":1134,"send":0,"wait":295,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-trade_tab6-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.840Z","timestamp":1790657296840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-trade_tab6-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 303\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-12f\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303,"size_decoded":575,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a320ed0e0a3b306eb7c53ad0b2301d1","sha1":"236c13e89f9194d4f74a19814be69f53d1da17b1","sha256":"a616c51b2a511a28c74b9d8ba3f73768854c637f90f1f22589272b8075fefcec","sha512":"5ce02747b5bf90c46b99a36c44ef9d470cda99ad10167ee56ea1cf8f54adff5da695e61d867a9a31693ad5f5facb02022179b45071d5bae41b237ded3fb2d036","ssdeep":"","tlshash":"5fe0eb92730c8c1cb9338212fbb4313b022a02c34a4c903ee8e92031830669fb937798","first_seen":"2026-09-29T04:49:19.954541Z","last_seen":"2026-09-29T04:53:07.699756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/eth.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.863Z","timestamp":1790657296863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/eth.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b09384-48b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1163,"size_decoded":883,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1163), with no line terminators","md5":"6c8b94d554caad39b40a6f7147fdc6a5","sha1":"66d27f915603d3286cf7257c467fa70e1422a462","sha256":"de92a8cf9812de5a645ec6e45df7843458c106187045b6f94f431bbc2d1a703b","sha512":"ec6c9900e3c43c736df89e4140184f5bcc7d328843ddcabd17bcce25f1d5c4e0841c503f5d6927419340be7336574244f7675f9d90158284bc8348f0d3161ea4","ssdeep":"","tlshash":"2f212ea8e25db92b884783fccb2d54633a5460ee578443e6b056d63a3490bdbec00bc0","first_seen":"2025-04-10T12:22:36.097854Z","last_seen":"2026-10-03T19:13:52.622469Z","times_seen":6487,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/cryonchain-logo.svg","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.898Z","timestamp":1790657296898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/cryonchain-logo.svg HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 26 Sep 2026 22:08:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab84269-34292\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":213650,"size_decoded":158904,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6262a784d1203d464eae703f31130036","sha1":"5b7c50e73ad1c0eecf69073532c61adf9840dd64","sha256":"932e917cd3df54afdf0a579e2b2dcf68a2f2843b846e2db6167fb01cfbf4f40e","sha512":"fd453ee81c40df456ea739a14d01ae37e7bfdecaffaf4aed5741ed187a372a6c4332a8a42e9e8bb91b221fd46f284bcd3b90908b170ac4e3b1a446d070bfe496","ssdeep":"6144:rzVh8sPO92ZZHmmzfAzVh8sPO92ZZHmmzff:8sPOYZZGmXsPOYZZGmf","tlshash":"5a24013239d845ba8c7a2ac5941808fcbfbd364e74f8b15447bc249c65e856837efa31","first_seen":"2026-09-29T04:49:19.957834Z","last_seen":"2026-09-29T04:53:07.723093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/resource/fonts/Arial.ttf","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:11.452Z","timestamp":1790657291452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bithumbcc.top/assets/index-06e2e3ac-w260813.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047301,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-10-03T21:29:34.434552Z","times_seen":8333,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":758,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-8f0772e5-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.141Z","timestamp":1790657296141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-8f0772e5-w260813-ethfix260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 569\r\nlast-modified: Fri, 25 Sep 2026 13:41:33 GMT\r\netag: \"6ab67a0d-239\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":920,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (568)","md5":"7be4de96fefd78e445d4ebb48f6791e9","sha1":"83f4e3534d4fb0e7b54c76c1495642ace96be35e","sha256":"94efaeb52f75b61d80c1e6b79d0b6562bb285b6b90dacae7b07f0f36d7845eb1","sha512":"84c4cccf1d8c6937867f377097fa6bcb674441bbb6f5b3d463e77f6581b221b66838ddd5fe9cddadc31fc2f4bdff31005a9eb645497dd7b7067e83229a97b309","ssdeep":"","tlshash":"e2f0e12f7a7980b157b388f8a2a33810a6180b492671c5d8d5860a00cb789f3d16f614","first_seen":"2026-09-29T04:49:19.966424Z","last_seen":"2026-09-29T04:53:07.688372Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-ac9333da-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.148Z","timestamp":1790657296148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-ac9333da-w260813-ethfix260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 13:41:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab67a08-1193\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4499,"size_decoded":2427,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4492)","md5":"3e1f075ec81d27822b691945201c2d8d","sha1":"0effed56b2e79c1a29948c243cc1b11d48d9e9f3","sha256":"a5c401e5737d4e0462ee4ffe537e5df148bbbfbb5e6e8f4dbe73beca05a6f209","sha512":"6eb0ea0398836f8d3e1afc24d42c7ed29f612c604f56a6bdb3cd8c1a7d5bbabf413b1667369e655272b85c3153593dc9f981ea391e305c0a29107a8c075be247","ssdeep":"96:cCTwwNPBfsnYZKqD+wHoUBPgehYwb8Vxk0WosE3hvyqEerA3XxB/Ej8:fTwwNPBfAYkqiwHVtgeuwbi0MhvyTXxJ","tlshash":"2d91a949f80284feae7b54d148552422718c3fbab22488f6f2fedd17637587ad741711","first_seen":"2026-09-29T04:49:19.967416Z","last_seen":"2026-09-29T04:53:07.699215Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-trade-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.816Z","timestamp":1790657296816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-trade-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 251\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-fb\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":522,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f422f8c518f46420856c8f75141376a","sha1":"25a3c554280484f3aa4b2ca072287a3564bf107a","sha256":"c220e031485d22d3ea9a83c4b5859c719725929c0319ec94d871202168901fce","sha512":"9bf318ba6369675373272fcf976084852bbb9d66aabf7ac0645c15195fd95a80a13a104cc9657abdbf759d7c4a146b15ef38a94f074b92f6a858709523949d39","ssdeep":"","tlshash":"1ad095492304dd0cf9214a11df64717a102d11c30a4c1058f8f51130530476ff837fdc","first_seen":"2026-09-29T04:49:19.968703Z","last_seen":"2026-09-29T04:53:07.732907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":161,"connect":289,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-fast_help_loan-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.850Z","timestamp":1790657296850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-fast_help_loan-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 325\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-145\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":325,"size_decoded":597,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dbc4ea61353af1bdadf144e537ac3776","sha1":"0b6826a175e0b3d85edb943be6efa6632a1c662e","sha256":"707f30e14c5f21a010a695c2af86d954331358dfa801435771985a622dfe2c0d","sha512":"bc435fd1a1f5f04111b5b602858f4a869049f879a773b02770598bcbf42cd953051bd4c00385d5ef66dd2b0e842ce37352e252809d3ae88ec4b6cb2abb6c7034","ssdeep":"","tlshash":"a9e07d51730c491cb9238623d6a9713a212e2092658c1138a59c13b18319f5fff27658","first_seen":"2026-09-29T04:49:19.969998Z","last_seen":"2026-09-29T04:53:07.696788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/btc.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.861Z","timestamp":1790657296861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/btc.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 801\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\netag: \"69b09384-321\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":801,"size_decoded":1073,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (801), with no line terminators","md5":"107060b925841745f310697bd9f1f83d","sha1":"40a2e01da20c164a3c3f774a72f3feadf17cafa2","sha256":"4dfca512e957e14f05da07751a96061cf4bfd5df438504f65287fa0a8c3cadb6","sha512":"fb7b987074d4701281c49fee08b1d44f2be2b3aa9ecffd0a88a6cc682aac06a6cd823598c8c8ba5ad43f8f1430a73c814148dea60d5740162cc41af7da324c76","ssdeep":"","tlshash":"24011ec55310f6046ec7c09dbf74a9e4110f60ae14a6c7dcf2c89f0835aae8ba614d48","first_seen":"2023-04-21T01:30:48Z","last_seen":"2026-10-03T19:13:52.686231Z","times_seen":7077,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/resource/fonts/DINOT-Medium.otf","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.794Z","timestamp":1790657296794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bithumbcc.top/assets/index-06e2e3ac-w260813.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73383,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-10-03T11:59:34.177313Z","times_seen":7680,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-quote-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.813Z","timestamp":1790657296813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-quote-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 264\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-108\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":536,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"101c2d083acdb093fa3186425e03409d","sha1":"e3eeea673dbc6da68f8991a30a054a7785ca37a8","sha256":"b0bc7d678b32d5c5eaa8bd7b09cacadcccb0e9be3eccae369d20a3449d549fb3","sha512":"0849208867e1d5a7e91def0bc32272a1214be15f81e405ba41e816a991932e1012ba2fa4ec1cce047b6e791acd9d06c52a7be6dda806e919fdd53c1d881d2c3a","ssdeep":"","tlshash":"f7d02b5562048c1cb5314622d6a4337a102902d6094c2128e4e611355309a5fb837798","first_seen":"2026-09-29T04:49:19.9743Z","last_seen":"2026-09-29T04:53:07.715965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":166,"connect":276,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/currencyItem-aa6875b1-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.165Z","timestamp":1790657296165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/currencyItem-aa6875b1-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2026 07:24:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7145-6d6\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":847,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"f92964f48464aeff92471d3a2220e29a","sha1":"817be7921efe5c3b9b01b6f5625ece84af62df7e","sha256":"aa6875b1bcbf0876a1a0afc7fd5cb582f7591450deb347321b03acf74d3e0345","sha512":"feda5b6a4e45e5765f049948c4a71cf85560457665e6c5aa6fee25216a48dcebb9a47f774e35af64eafd90f9f01a13880a1effd08f66a33da6c3e3faeea60438","ssdeep":"","tlshash":"4c31a04897150374da37c88a6fa8064490543fc5b0c759cdea8f06371ccfa936a7296b","first_seen":"2026-04-10T14:31:13.694354Z","last_seen":"2026-09-29T04:53:07.689377Z","times_seen":10,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-home.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.808Z","timestamp":1790657296808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-home.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 264\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-108\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":536,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38e27f0597880303bdd3b4647ad24769","sha1":"19e5864c47607376f850b7641b0a27e179f1660b","sha256":"0d4de3abe56c11f641ed1b3949ebfa6b5c748569264e63f9038af4d0bcd8b6a6","sha512":"15331ae754d19c76b92b7aab72d112ed83321739606ac7b9efc59978653a157dbbf71fe065089069a674830f0d7d5137f28699d0c71852dc501448852786d1c5","ssdeep":"","tlshash":"d3d02b46620c4c1cb63a0b21e67c7039003900c38a0c5029e4a12130e2045afb837a6d","first_seen":"2026-09-29T04:49:19.976131Z","last_seen":"2026-09-29T04:53:07.694604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":170,"connect":273,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/kline","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.896Z","timestamp":1790657296896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":467,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/vendor-414500b1-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.188Z","timestamp":1790657290188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/vendor-414500b1-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2026 07:24:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7146-17375\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95093,"size_decoded":38409,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"35ecad4c07443df7d84d0be46a8787c5","sha1":"ba68010f02ac07cb3bb0e34e91e1c6bc0f5e07a5","sha256":"414500b1c3c994ee0de756dd85fcf0c82998ff902245516d486e10be4562360a","sha512":"78476e19fbc2f0193aa86ace25d4d879ca9079bb3238af362d88f5e7e89b6408f6d99769f9b1e2e0f51f4175a52fba2aa29dbe884afef106d1011e455fd59dd0","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/db:BnNIClDsIxuVS8pb","tlshash":"b393d4a5a5c461fc6f2ae2659b8766e8f13cf671cc01daa0f105511d0fcbbf50623a2a","first_seen":"2026-03-16T14:41:33.289442Z","last_seen":"2026-09-29T04:53:07.724799Z","times_seen":705,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/resource/svg/light/mengbanzu12.svg?2.0.1777377449623","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.851Z","timestamp":1790657296851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1777377449623 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\netag: \"6542bd9c-322\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1074,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-29T05:15:58.746392Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/charting_library/charting_library.min.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.185Z","timestamp":1790657290185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6542bd9a-2a6b\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":3537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-10-03T21:29:34.45049Z","times_seen":7396,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/currencyItem-3b00eedc-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.162Z","timestamp":1790657296162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/currencyItem-3b00eedc-w260813-ethfix260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 13:41:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab67a0e-5f1\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1521,"size_decoded":1076,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1520)","md5":"2bfd70fb78c98bde26156c61ac35f8c0","sha1":"ad0230b611e3a5155468fea3514ff7c1ad85a041","sha256":"5b6f9f8836ca55f402ec250eed0f1d46bceb339e59d8fc160db5dcb0d555d518","sha512":"4aa155fcf888f46f8dca54724d84b0cc2560dfafa8f6771f25fdbabc0fcde1f267ad237884f020cb0017689429155dcfb4abf4f8551babb47be0818e8611b123","ssdeep":"","tlshash":"b531bd8a9e04c3f1c3bf906294b91414521d7bca70618986efee24947bd75bcd736a31","first_seen":"2026-09-29T04:49:19.981562Z","last_seen":"2026-09-29T04:53:07.727917Z","times_seen":2,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/resource/svg/light/mengbanzu13.svg?2.0.1777377449623","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.857Z","timestamp":1790657296857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1777377449623 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6542bd9c-4b2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":894,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-09-29T05:15:58.710864Z","times_seen":1044,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/bnb.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.868Z","timestamp":1790657296868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/bnb.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 505\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\netag: \"69b09384-1f9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":505,"size_decoded":777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2626df36e7822f2ca4b9cef986fa3c12","sha1":"0735b15f9f11df0dd5ef41218184fe3b5304977a","sha256":"ce2befc91baa544c13b63d6c02a12cfcf84702a5ec29b650e358a8b4a96c4ce8","sha512":"73b7c52d38d25635c157ba5eb8f11206442d1164f1ca7df3501d086a40c0a40f492bf18a9e3ed8a3f0a891b3d3da8dbfc8f1152114b1d6f5b323a3f111dd3b7c","ssdeep":"","tlshash":"1ef059d888247e10ce062d58ef3ffc2304573425094a7de2e25a9b16fd589ddf885e14","first_seen":"2024-08-19T21:48:13.537326Z","last_seen":"2026-10-03T20:22:30.999143Z","times_seen":4797,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/api/common/getAllSetting","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:12.458Z","timestamp":1790657292458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:13 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":443,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":280,"send":0,"wait":280,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-12d480d9-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.154Z","timestamp":1790657296154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-12d480d9-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2026 07:24:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7145-a01\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2561,"size_decoded":1103,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"3cc32cc9921f2cb0d2ce34a99cd7023f","sha1":"a3703646b19f9065508dec355969fba5a29c970a","sha256":"12d480d96110a3a203aeb6a3e1ae8f0e019e50b7ec85d213050583204f29a567","sha512":"d3fa505cae39cd9a576d682a3c5345a6c8027be2faa68a34def6b86b033e522e530f75929741a20fbfbbe33c2a55953f232f9a6f64aecbb2a9af6239913d84cb","ssdeep":"","tlshash":"1e51658cf79915341d3bd59bae595e4894007f82e647aec4f05bda2a0ecf6f3172031a","first_seen":"2026-04-10T14:31:13.575409Z","last_seen":"2026-09-29T04:53:07.6754Z","times_seen":8,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-assets-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.822Z","timestamp":1790657296822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-assets-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 273\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-111\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":273,"size_decoded":545,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db51405bd0754e0d2115f2665f35e1a","sha1":"92ea63e89fd0d361f9ecfeecb99fefcdcba94682","sha256":"cbbc47d81ae8ab4071831459c36d719447504c9f5f43eee4aa22f175f09f3396","sha512":"0bfa894093db686b66ff579f1110e7eddc704c147bdf3b0afc0fa54fd4a2b14863d148358234d6972520bd75601ad39f060f13af855f2b7be2c980bf56b434ad","ssdeep":"","tlshash":"b8d02b8622088d1cf4214712fb7c727a1129019a5a4c212cf5a5123053587deb83bbb8","first_seen":"2026-09-29T04:49:19.986513Z","last_seen":"2026-09-29T04:53:07.684339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/api/common/getAllSetting","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.886Z","timestamp":1790657296886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":453,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/banner-premium-1.jpg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:17.483Z","timestamp":1790657297483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/banner-premium-1.jpg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 20 Sep 2026 17:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab01348-4dc4c\"\r\nexpires: Thu, 29 Oct 2026 04:48:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318540,"size_decoded":318578,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1731x909, components 3","md5":"6b68d073f64be1f5d6ba4c204b26ec37","sha1":"d0f694c3565c196d0bf809c7fa82120c4d7c0236","sha256":"11fe892efb7d1b7af28e1593a9d03207b75933490bbd04fa61831fb8f6d8f050","sha512":"912f553611afe9cc3c9a2ac4307a8e598da13946f5e3e4aaa1f1a50334ced8e4fb6814a5b252453ca1cbf13ebd901033e9189f6e4433180fafcce62af70cd4b7","ssdeep":"6144:vrYmjWPpDa5WSZpsfRizzSnq31Dln/xJjWzfWcF0IXrEV6958y8:vrYmjK5aqRinSnq3/n/xxWzfWcF0u79E","tlshash":"aa6422b6c0549401d1edba9f03ac53fc9fdb47145ac59a6048a2b8fef8b11b074a4dbe","first_seen":"2026-09-29T04:49:19.987851Z","last_seen":"2026-09-29T04:53:07.685216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-trade_tab3-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.836Z","timestamp":1790657296836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-trade_tab3-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 281\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-119\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281,"size_decoded":553,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1152c96f4ad94a5109d85d44699729ed","sha1":"4b49ca83cc358b7a8c1db937b58684da0c024097","sha256":"328ec75b17197d1aa89fb5afe988b46bbb94d759486dfef0ad2cb865c56782a7","sha512":"345181c8ab78409bd7597783125d73dea605eccdb6cfe55f9ee9767957c288de6bbf8eb9d41a8f0bfc6d541dcd39010aee9f48ad014fd56379e4310a5806d38f","ssdeep":"","tlshash":"e2d0c296620cc91cfa218715f668367a002905967a4c9028e4a1327552187aeb82b6a8","first_seen":"2026-09-29T04:49:19.989351Z","last_seen":"2026-09-29T04:53:07.682167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-host_non-collateralized_mining-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.838Z","timestamp":1790657296838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-host_non-collateralized_mining-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 282\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-11a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":554,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b31e8c58c413a3e08a09522ed88bba99","sha1":"6ea12074d2fe85f295c2ee2ca7796363f354537c","sha256":"900930128a8987151a00a51694f5b0b985be7276c0572df2cb37cf2a3bdf2876","sha512":"8a99704215a4c85f8348b0bc6e6775508c1674858b4a614b2aaeec748f2aa3a8021ef47d7d8f696efb6827c09e1467d156bea35bf455a29451838fae6b65ed6f","ssdeep":"","tlshash":"f2d02b456348cd0cba214653ee7c317a207e10e7959d521df4b51174530979fb93bf68","first_seen":"2026-09-29T04:49:19.990997Z","last_seen":"2026-09-29T04:53:07.697724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/xrp.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.864Z","timestamp":1790657296864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/xrp.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 661\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\netag: \"69b09384-295\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":933,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (661), with no line terminators","md5":"4cc138d1e09d2133eeca65966f3894f0","sha1":"cf40ee7fc2a18c2f6ae3c7522b6234ca45743623","sha256":"b2296bde0cbe8bc2cd069e06dcc26ebcd6cd3203dea044abf5a2fed0dc4ffbf6","sha512":"ba132f8034dc017c417c82c74747a3b419e760f9c18213fbb567e6558912f47108c01e8b6d4af1dd422daa51518095a660ddb2554a2b614d01ef8ed4c6039f9f","ssdeep":"","tlshash":"d301236dc738fd19fa45c65ced248849124770db875e01cbe3c0ae0b30b96c7580cd54","first_seen":"2023-05-02T00:43:59Z","last_seen":"2026-10-03T09:18:07.708829Z","times_seen":2615,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/xau.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.877Z","timestamp":1790657296877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/xau.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 351\r\nlast-modified: Sun, 20 Sep 2026 17:03:51 GMT\r\netag: \"6ab011f7-15f\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351,"size_decoded":623,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"380c7dcffa95e78a6d86e9e248f623e0","sha1":"8050c6fff653d19e73c32169c9f2e00df17bb0f8","sha256":"d8c511dde9b26387312c34824294ee7fd728e02dd37a8d90b7bba0b40ca414ec","sha512":"4575c11f159b71dfec0c87ac9e68dd4deff7f96ac12f072df9633e70a5f0b66a62170138e85c70eb4577ed4054ea026d07562c455887be4df2cbea96b46af57e","ssdeep":"","tlshash":"52e020c5506d2915c90c4b582b8e7422467d76df6845c56c7415431232c2bff78d5754","first_seen":"2026-09-29T04:49:19.992666Z","last_seen":"2026-09-29T04:53:07.718125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/banner-premium-0.jpg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:17.480Z","timestamp":1790657297480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/banner-premium-0.jpg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 20 Sep 2026 17:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab01348-48d67\"\r\nexpires: Thu, 29 Oct 2026 04:48:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298343,"size_decoded":298311,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1730x909, components 3","md5":"7ef9997e337de2c864cad9a294dd92ea","sha1":"99dd866c3d0bdff91d2b54caf9fd7841cf9efd18","sha256":"2ebcb633cb8e25b30c5a982062b97da80dbc19073885893ceb75ac7f87490aed","sha512":"62b65ef64a84823d6ae9f76c47895f36003a9b8d1ef3fffcccaccce2e985dc7cb1ac3da026f53b2115f9653e5e67bfea7348f986b51eb422bd6c27a9e1321d06","ssdeep":"6144:J3s42tdddje4GMNsMCXwurf9HBQbExWI5/xhGDOFJ4rTUVi:5s4gddg4cMCXw6x2bCWI5yK7eTUVi","tlshash":"91542370e2177448cd6a3224fd09fcb4a2bfc8671c662547a65347787ab9c422ec46fe","first_seen":"2026-09-29T04:49:19.996938Z","last_seen":"2026-09-29T04:53:07.701416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/account-avatar-260921-ethfix260925-xauorder260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:11.455Z","timestamp":1790657291455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/account-avatar-260921-ethfix260925-xauorder260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 13:41:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab67a09-ea3\"\r\nexpires: Tue, 29 Sep 2026 16:48:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3747,"size_decoded":2182,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (747)","md5":"567d202c43951ed59fb122cf656059cb","sha1":"5e193ef54bd34399562cc2c05ed27422bd07d6e5","sha256":"5d49e25e4105766fe03978b058d2a83690d59fa0a49f1cf057729b598b88a243","sha512":"951eba487c67895ccda462f6ef464cfbdada37082c2076661a7280fb15a59eee26731c5886fdbdc89f97d7322250fc8999cba7839d608397aba240994d70e64e","ssdeep":"","tlshash":"1171d6d171a130bb86d238f7e5aeb65432726184b042d192da3c8ccc6db9842177ff9d","first_seen":"2026-09-29T04:49:19.998258Z","last_seen":"2026-09-29T04:53:07.681332Z","times_seen":2,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/api/common/getCoinList","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:12.461Z","timestamp":1790657292461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:13 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":443,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":275,"send":0,"wait":279,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/filters-37197317-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.159Z","timestamp":1790657296159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/filters-37197317-w260813-ethfix260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 13:41:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab67a09-cc8\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3272,"size_decoded":1578,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1685)","md5":"c5bcbedd345579b7fb52e2ad76c63832","sha1":"4d998eea0dba27b0bcb20a369867a323e1a1a6e3","sha256":"76d1c818694d390371c9541776adc48ab1fae564fae13156f5ad27a46c7341f5","sha512":"32af8ef707d3be6dbf5d968a89b5f778dd4f81409c48eaddf9376a9de6cf4e07e82eac221b95b14dcca78d65d8406b1841853fc8b1dcf85f95708d2b35ad3731","ssdeep":"","tlshash":"fb6145fdf8d3617386e969fd40288014b18ebe14647e0b89e55fd0816973888d0bf738","first_seen":"2026-09-29T04:49:20.000505Z","last_seen":"2026-09-29T04:53:07.730726Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-promotion_center-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.847Z","timestamp":1790657296847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-promotion_center-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 285\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-11d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":557,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"631553882e4240c2fb984509502d8034","sha1":"cb21273ff809cce7b44e5c8d8578a657a763cd6a","sha256":"1936620a69faa19130c5c1e15d76fc3dd18a95aec5fe778d4e6229bd21b5d6fd","sha512":"a400fefd7d8ef183a2fe32485be5d81de550dad313b07624027a1da5795b3c6635d91db27d96c7ae0e5f5d4b869d4b0cc275f7a8a26fe1c73bf8041c9e94ad98","ssdeep":"","tlshash":"64d02b4666548d0cfa214b11e7a837be016901c35a4c711ee8f51130531876ffc77b5c","first_seen":"2026-09-29T04:49:20.003028Z","last_seen":"2026-09-29T04:53:07.69831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/disabled-feature-guard.js?v=20260921","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.197Z","timestamp":1790657290197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/disabled-feature-guard.js?v=20260921 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 545\r\nlast-modified: Mon, 21 Sep 2026 04:27:27 GMT\r\netag: \"6ab0b22f-221\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":545,"size_decoded":896,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (527), with no line terminators","md5":"89468c1356a4ef2e8a0369db88d2fefc","sha1":"d2c0464dce6a8c495ded68924147df517fcaa4fe","sha256":"373a19132e5925c78964b0b9f67e43716db8abe747af21a73b96b86e83c6b86d","sha512":"f40dbf893f46c8a6dec619b7bc19a9d8ac4424f053837af134f6ea8c2cbd45868e5f518a5a451a6fbbf90af885bcfb8bfd93818cea697953f8ddd12b7e56c820","ssdeep":"","tlshash":"b7f0c0681006d03b48d7a5ebc260a3f9f932203fb8d6f0e60d2c558a2c9bd5627708b8","first_seen":"2026-09-29T04:49:20.004126Z","last_seen":"2026-09-29T04:53:07.686479Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/platform/dev/logo_144.png?2.0.1777377449623","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:12.709Z","timestamp":1790657292709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1777377449623 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Sep 2026 22:08:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab84267-23dc\"\r\nexpires: Thu, 29 Oct 2026 04:48:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9180,"size_decoded":9376,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced","md5":"46411d0f750f3e95e77d4e12b57712be","sha1":"cbfb08bd089e6e5647042db9fc71f5e6ecab7519","sha256":"90ace8c17bd9a6bcbd2989ec59a57a200142a1d8e1b1384914a7aa1fb4938e75","sha512":"511f502710f95c51bf83cc6be6b4915e92879bd52b6bdb5a34e8822fe2443e7064ab3b9e099a673e6c1df2a4ed0e356847fa0a3f28416cfb95c45757384217a1","ssdeep":"192:dZAov4Yd+3Jf7W7otOnVxXUENKBzS5sPoCQpkAACiqVRhItcABM:PARYd+ZzW7otUrUjhvSiSiWv","tlshash":"41128ed35c446330e7b849d3edf8841cea166953f9011cc67a5dcf07a75223398a63b9","first_seen":"2026-09-29T04:49:20.007033Z","last_seen":"2026-09-29T04:53:07.687118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/resource/svg/light/zu447.svg?2.0.1777377449623","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.860Z","timestamp":1790657296860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1777377449623 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\netag: \"6542bd9c-1a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-09-29T05:15:58.741094Z","times_seen":569,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/trx.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.871Z","timestamp":1790657296871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/trx.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b09384-648\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1608,"size_decoded":1158,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1608), with no line terminators","md5":"806b2da490c65d461e525da3c0eb3b66","sha1":"57d04d774c1613940e63a7bf2ac31110061d76df","sha256":"13d28acd98e700a0e8b5a266597123caf8757f6baa6f90706476667a410c6b21","sha512":"f08ddf490b6dc1bf63d9854040791c383588be8ccc515dd13c29a353bef437810559edd5cbfea38c12fcbef5e1aedafca4df621e8e4dbb56e8de01a777a97e26","ssdeep":"","tlshash":"8b31ceca12347a4d25ce946dfb6ddee4d00ab0deb1a592c9714f6314da0edc6fb44424","first_seen":"2023-06-14T21:27:12Z","last_seen":"2026-10-03T02:41:45.654989Z","times_seen":1763,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-financial-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.834Z","timestamp":1790657296834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-financial-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-10a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266,"size_decoded":538,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eaab0e71b00b6cb15c2bfd575b6ca615","sha1":"f54fe88c2ea3945f556ffeec099f916f25c1a718","sha256":"3dd67cf79433425f9d972ee08dc3c4525cd7afcac78f7e592392f943c6094bbc","sha512":"e764f4263f1504cd8737e763ce1fff6e0d3c10f2c10807d0aa7991fa536ad86543e659fdfa94a594a96e8d20f271df5d37b7922dea8519055d2538e9b8408465","ssdeep":"","tlshash":"45d02b855308dd1cb6214621eb68377a102911d20a0c201ce8a910315209abfb93775c","first_seen":"2026-09-29T04:49:20.010004Z","last_seen":"2026-09-29T04:53:07.720592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-06e2e3ac-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.191Z","timestamp":1790657290191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-06e2e3ac-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2026 07:24:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7145-4a45e\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304222,"size_decoded":66667,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"60f8193ed5f2a25f588a16d5c09640cc","sha1":"efa9eac4df8331d16cbff91c8a4ae6a2835d3d05","sha256":"06e2e3acafd15eea8674b841ea0832674f0b6b123c6dbc07ae3334e804218a13","sha512":"fc5233652b26be7d84ac9a64ca654f92576d3e78d24f5e1ad5568ca100cd5ce85c01863388c1905bfb809d15dfe8c01e6be534a229ca5b75512cdb1d29191ab2","ssdeep":"6144:nbvxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05TQ:bv1C9dZ8w71ZACkFDS3vyf58rBeV05TQ","tlshash":"4054c5a9a590117c6f27aa7597ce5ad8f23ce6719c118de8f201600a4fc3ff92363617","first_seen":"2026-04-10T14:31:13.578826Z","last_seen":"2026-09-29T04:53:07.727244Z","times_seen":8,"resource_available":true,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/en-d2da2ad1-w260813.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:13.656Z","timestamp":1790657293656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/en-d2da2ad1-w260813.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Aug 2026 07:24:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7145-a6a4\"\r\nexpires: Tue, 29 Sep 2026 16:48:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42660,"size_decoded":13249,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42637)","md5":"29c3b5ec206a320048bf70367525535a","sha1":"02058f60e3ad10f7bd041ced990895d59ba38bda","sha256":"6d1a0d5e0e32378e7b3b6478582ff1d62cd6517246721b0bcbd1ee9ae00907a3","sha512":"6318f691804294b3a3c4ba1881a2849732e9e92fa185d3bb07fc1c748e2d9cbd8b58104fd11a9719de55b83a47cda3693abbbfa5334d4df87312a6339f3e78ec","ssdeep":"768:QRtZcEw/o7rKOdAAWihnAMCbrkaAMxVoP6+6sPG9J1mwO6Ypk7aOwxj:pponKOd9nEbrZxVLsPWJbwxj","tlshash":"e913e8897e1a999a04f3532774ce6e6120f60ac18255881f4fecc9fd53e2b67a363734","first_seen":"2026-04-10T14:31:13.613077Z","last_seen":"2026-09-29T04:53:07.709746Z","times_seen":10,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.cryonchain.com/market-public-v4/tickers","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:14.207Z","timestamp":1790657294207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"GET /market-public-v4/tickers HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bithumbcc.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0L9fKEkaja69JgRI1+AewA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Tue, 29 Sep 2026 04:48:14 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GE624FgBgoyTk5M1rcvw8K9QbVg=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":255,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":273,"send":0,"wait":287,"receive":0,"ssl":280},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-6d1734db-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.167Z","timestamp":1790657296167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-6d1734db-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2026 07:24:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7d7146-2bc0\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11200,"size_decoded":2876,"mime_type":"text/css","magic":"ASCII text, with very long lines (11199)","md5":"3d045f21e7efaf6239a5659e60314683","sha1":"372c320915c2f6e981b1bc2e19f7d18a3b5b338b","sha256":"6d1734db7a16dc2451dfb194be8eef5859e454f7be8615431ea1d9d685d8c9cc","sha512":"fe4be3c2d82dc4b3561c635801e4f1ef67749fa41c4fb8a0cdba7384521b984a1ff096bac7290028f8d3ce112ee0ea2020e44cbb4bc24e0a0b4292a47a8e13b9","ssdeep":"96:R3f0tHGod7oOl+CZjXMp5mXUVM2tLGkuNWpZejsPfrGtgBF4rjaYeBLgNjuF7H:Rstmodj+CZEYtkQSRVFKjjqLgNja","tlshash":"2f32752df7942739bc37d465ba9899cce10a7e11d68359e4fa57d2220ccb6e71b30248","first_seen":"2026-04-10T14:31:13.699387Z","last_seen":"2026-09-29T04:53:07.711561Z","times_seen":8,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-flash-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.829Z","timestamp":1790657296829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-flash-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 251\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-fb\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":522,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9fb7217080f2d02518784b8c8105eb0","sha1":"451bb84f1a33ce094a45a39374f71c70c25cb02a","sha256":"57b9512ef2c35c0a1fd022ee932b9338642efb198f290f7e3499eb9a404d9bfe","sha512":"3d5501d7722b6a757866e0c976ea1a45c354bc66dd3132ea6aa0f462ac4725cf089a4e7ae3c4143f5bc671fa3ab4ee8186ac46eefcf226f35bc079f2aa97be37","ssdeep":"","tlshash":"5cd0954552044c0cf6214631d764327b102902d74a4c115cf4a12030620866fb937b5c","first_seen":"2026-09-29T04:49:20.022371Z","last_seen":"2026-09-29T04:53:07.702261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/sol.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.869Z","timestamp":1790657296869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/sol.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 589\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\netag: \"69b09384-24d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":861,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f48b6e8a88f7b0aa4b6598aa7715465","sha1":"93e573e9f1376bf17af2ac11f136c597a5eed82f","sha256":"94e47e7c108a338cc4a79b82673d66cfbadfcf4c934ccb9c2ca8f13e8ea7dbb2","sha512":"0a7981504e74f5fef2b3526fb5be81692c5362e01b17fb49c068a2f2c3744c9cab65562a71d6feb837ac360fe290310e43ae3a83a79ab0e1056f4ec0d6653a89","ssdeep":"","tlshash":"91f046e2a15cf5cee04cdd1a24cfb11238a13047f07be4d0bb892684f88b0c7ba04e64","first_seen":"2024-11-08T20:22:57.120472Z","last_seen":"2026-10-01T02:19:54.549368Z","times_seen":4688,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/kline","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.892Z","timestamp":1790657296892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":467,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:48:08.670Z","timestamp":1790657288670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 26 Sep 2026 12:15:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab7b767-233b\"\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9019,"size_decoded":2910,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1249)","md5":"b4ad8b7607da3a1112f59ec041261701","sha1":"a16d3aa051e7f06ede137ac6818a1d94ab368f28","sha256":"83d8cdbea8233b714598f1f87686b192408c4ac217fdc8fcd290e51ae2700851","sha512":"9b191a1823b0af8a9a52c760ed1563062e565e596aa3ee555e7316262220799f71c684cdce21f2db862a078150995498279546378c12570cc2557ee4f688776d","ssdeep":"192:TFHK63PxKJGDqZCxfc2nfD3b1C+uB1ni/Vibf0q5n:1/PxgGWZCxE2wi4bV5n","tlshash":"4f1285633ff0a49293b179f949e6ba0466b105ce413b5994b1cc00e8cfa5fe580dfd62","first_seen":"2026-09-29T04:49:20.026494Z","last_seen":"2026-09-29T04:53:07.704535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":308,"connect":288,"send":0,"wait":288,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-d253bac1-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.144Z","timestamp":1790657296144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-d253bac1-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Thu, 13 Aug 2026 07:24:54 GMT\r\netag: \"6a7d7146-3d\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":396,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-10-03T21:29:34.444703Z","times_seen":508,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/ltc.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.866Z","timestamp":1790657296866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/ltc.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 291\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\netag: \"69b09384-123\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":563,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"135fed0ba41e2cc6f0be38d91f6d4327","sha1":"4cf7a4ad00909e8b92e5c9a428f71721481a78b0","sha256":"fea85b7101beb79844d8b4396a6df981f4757c150cdf3f61bc59453dd2f440ba","sha512":"284ed145b37532800719a469597d5b3162e4e8b765aa207835ea7358c3806f0256cc891e7095dab891eba9d33f777aabbd166901bee0da450d26edd199c1234a","ssdeep":"","tlshash":"91d07d6d7224a40dc301c3d4b378a8c10151b0d9d29542c4b1c4351926019e73c20248","first_seen":"2023-05-02T00:43:59Z","last_seen":"2026-10-03T09:17:49.243958Z","times_seen":1946,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/account-avatar-260921.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.194Z","timestamp":1790657290194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/account-avatar-260921.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 657\r\nlast-modified: Mon, 21 Sep 2026 04:52:14 GMT\r\netag: \"6ab0b7fe-291\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":657,"size_decoded":994,"mime_type":"text/css","magic":"ASCII text, with very long lines (656)","md5":"948188a06ece957d9bea949921538255","sha1":"57d91b03a67ada0896f0f064374530d0890c2caf","sha256":"5961c7e49f542bacc7f635aa59e85680f15dbff0638db9f8357d00eff201279b","sha512":"b14db98a705562e8d2fa20e080554367b97495f6388cb285b57ac21bea8d09690a3a84035cff318e64bf612bc64479f65ba5fc58760488d7f9a0681af849971f","ssdeep":"","tlshash":"7001fe22e95d101130aae864fdc4b7df24a5d463c32046addfd9bd10c9ca0d6599aa15","first_seen":"2026-09-29T04:49:20.033256Z","last_seen":"2026-09-29T04:53:07.675949Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-f5aa06a9-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.135Z","timestamp":1790657296135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-f5aa06a9-w260813-ethfix260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 13:41:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab67a08-410e\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16654,"size_decoded":6011,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (16637)","md5":"e3177e28c5b3da46d89e229267a0115f","sha1":"971ac727a382026a389e583debb540c8df342e4a","sha256":"598be0f161bf62999d995ca7bdf2883ef288bdc91e4a4efdf99ebe972da7886a","sha512":"7dedf47c20ac873339634929fc58ef316c1fc6ae6404ef11bca77cc34096839548d4fc81b1e3562a415cd7c6cecc75c9a1df17c32e8bd5c3ba40072fc1215dc2","ssdeep":"384:e2HuKWZYuKFPn1WGMHKC5YJaA1mZ8LMS+eOFiGJZvfJYoH0tzpMHjMoLN2X2ejeV:e2OKtV1XMH556NQMMgqiOZvfJ63K4oeK","tlshash":"5d72c859f507593cf2baa46110490000722dbfcea00e8df2b5bd5d866767eacb799718","first_seen":"2026-09-29T04:49:20.039988Z","last_seen":"2026-09-29T04:53:07.703699Z","times_seen":2,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-08fd707b-w260813.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.149Z","timestamp":1790657296149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-08fd707b-w260813.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 762\r\nlast-modified: Thu, 13 Aug 2026 07:24:53 GMT\r\netag: \"6a7d7145-2fa\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":1113,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (761)","md5":"759b7a4df1b69fc72331d0a3e06f3541","sha1":"29958f531ee0e9d846ed47091b4e847229b4eea3","sha256":"113680e8a4fe7cc5b5fb0a095a00d66b221acb3bdf9fe19bd1c66cb199583586","sha512":"cc09e704d34ed27986e9328725665718dcde73349138fe43f35a6666b7d4ab7bdf13d0197206d16ce871a9e47ec8a3a63da0f85cd7ad61e606b1eabf6620c033","ssdeep":"","tlshash":"d601dcf9fd5cce762fa2186052902a45200d5b9dfe2025e248573e6427a9960c79e72d","first_seen":"2026-09-04T16:09:17.744712Z","last_seen":"2026-09-29T04:53:07.715314Z","times_seen":3,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-bc011be9-w260813.css","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.152Z","timestamp":1790657296152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-bc011be9-w260813.css HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Thu, 13 Aug 2026 07:24:54 GMT\r\netag: \"6a7d7146-18d\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":734,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-10-03T21:29:34.457059Z","times_seen":1630,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/kline-2c584c1b-w260813-ethfix260925-xauorder260925b-xauorder260925c.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.157Z","timestamp":1790657296157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/kline-2c584c1b-w260813-ethfix260925-xauorder260925b-xauorder260925c.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 129\r\nlast-modified: Fri, 25 Sep 2026 13:41:33 GMT\r\netag: \"6ab67a0d-81\"\r\nexpires: Tue, 29 Sep 2026 16:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129,"size_decoded":479,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"0be3923f88d8d00a93a29aac3ea0b35b","sha1":"1d33ae957141e7973803b148f4ef1067c941d661","sha256":"ff185c0789c106ea5a3c2a8bdda1558f13ba6f8aa735063fdec31b4d900e0afb","sha512":"95d57047a124ec078f06e6cc62b11324e4721a79ccb18792e2e623339ea99e4c409c306f7a1687bfd3a2b11b0b2019b655eacfa964889c0a616f16d31d303b81","ssdeep":"","tlshash":"a3b092277bb122e082789cf826e47d01467018ac53735a86c2480101caf62f2c1dfd01","first_seen":"2026-09-29T04:49:20.050541Z","last_seen":"2026-09-29T04:53:07.70608Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-trade.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.820Z","timestamp":1790657296820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-trade.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 248\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-f8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248,"size_decoded":519,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62b09fa803b94753e85c29ac27074225","sha1":"2cc27ee9d68fc27bce067a5c67a257e3261f012b","sha256":"5db5c65f595f8132407032300d546955368763e7cca387a1f21843fccddc937b","sha512":"d69941f7bfdd23fded58a9860bf26ce8464edcd51ec06f135480dfb908a5bb0519ea2c4146076e8029b6e88330f91243dd48f2aebbb8ba2075cde5e0abc75ac1","ssdeep":"","tlshash":"ced02e492208ad0cb9220a20eba8b039002a11820a4c1068e8a12230f2046afb837e99","first_seen":"2026-09-29T04:49:20.051967Z","last_seen":"2026-09-29T04:53:07.695324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":158,"connect":285,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/resource/svg/light/zu29.svg?2.0.1777377449623","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.858Z","timestamp":1790657296858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1777377449623 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\netag: \"6542bd9c-348\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1112,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-29T05:15:58.771195Z","times_seen":1049,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/resource/crypto-icons/doge.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.870Z","timestamp":1790657296870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /resource/crypto-icons/doge.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 21:56:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b09384-4fa2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20386,"size_decoded":7707,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (20386), with no line terminators","md5":"47f2b3d4f911b55a91159a4c2e3e3653","sha1":"e3362d909dedcc2802e4d5380cfe7b49a3b47317","sha256":"02d453ba9c1f6d45ec6047a546c5ecc2f260825c06823ae0c5614ffac58eff6e","sha512":"fcaeb576c027b5da4cd2974844937b3ec6c60a6ecbca70bf19cb4568d21a0bb359019f97f0755301ae6385cf053e960c5c721991ba20ae973415c5242dfc74d3","ssdeep":"384:tdgsKDta3tuqJPjyKQn4MLpl/7vUbzEjREgfjY2e4+gm/pyj+v+QfuwYFrn8h:ngjDI3tuGjyKQ44phvUfnajjC/e+v+Qd","tlshash":"859204596148a76c2892f34ec7bfd4e0234e005ab1aad6d91effe7ecd00e650fd52824","first_seen":"2024-01-16T04:56:00Z","last_seen":"2026-10-03T09:18:07.799411Z","times_seen":2344,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/favicon.ico?2.0.1777377449623","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:12.712Z","timestamp":1790657292712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /favicon.ico?2.0.1777377449623 HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:12 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3231\r\nlast-modified: Sat, 26 Sep 2026 21:27:13 GMT\r\netag: \"6ab838b1-c9f\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3231,"size_decoded":3503,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"c6205582d22ba833cf4e2c81476d3439","sha1":"8f52713470f9e2155a9ac1659fee01b785bbe4ff","sha256":"2498ac2c9448bacfe67a8fa654d80bcf683343364aeb8e1bcc9d6daa7930e380","sha512":"c9f0320689ded7cac6261b1fba939c096bb71e5a63c3572e472e5132f0e98f44fd7de0711cfc1f0477ac0fec959eba256c5623c8f228bd7b30f8342c6dd47f82","ssdeep":"","tlshash":"b3612ca10ea4a8f7d5ef8ea3ac50480e3a3fa613be51550d754e0c965f1d27852e32cf","first_seen":"2026-09-29T04:49:20.058215Z","last_seen":"2026-09-29T04:53:07.709051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/api/common/type/defi_activity_type","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:13.986Z","timestamp":1790657293986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":453,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-assets.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.824Z","timestamp":1790657296824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-assets.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 270\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-10e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270,"size_decoded":542,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8c9ccb75b22823a77f9155a4de3d022","sha1":"060662685f6db4f5a08639bef2d83cd330ef5129","sha256":"e7a3b7e52bd9eb5727416d421599df09de761acb38ecc76f3af124049cc9fb27","sha512":"d53b33bcbb586d460d63d2c28d07e50f93700ce2215b71ea8eede2703f14ed51ddc91e1f44f0067f5743f83455547e7548ec136a59e41dfa174092c66a52d8df","ssdeep":"","tlshash":"fbd02b4612088d1cb4124721fb7cb139002900865d4d1128e5a01230b3542deb83bab9","first_seen":"2026-09-29T04:49:20.063633Z","last_seen":"2026-09-29T04:53:07.707082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryonchain.com/media/local/icon-defi_host_lockup-active.svg?2.0.1777377449623","fqdn":"cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.845Z","timestamp":1790657296845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /media/local/icon-defi_host_lockup-active.svg?2.0.1777377449623 HTTP/1.1\r\nHost: cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 276\r\nlast-modified: Sun, 20 Sep 2026 17:03:05 GMT\r\netag: \"6ab011c9-114\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d1434fe99d15388e2be0a46d241285e","sha1":"76952333f1cd72ad87ba26f94035217fc2e7011c","sha256":"9f00ef318efa54bbd1b51ea85a202c41afbcf2f466458b77a8c0a65e1f96d378","sha512":"10dda68f32a883598ff5f91da59dfcb8f59cec8591780d025ed8525d2e1509db340c4a97fa3a8798b1e3970e482f0f0b8a3615cf47f8bc099cddfe7e8f2ddacb","ssdeep":"","tlshash":"13d0eb4b93188c0cb4210221eb74327900fe20c2ab0d212ce5b01030a20829fb433b8c","first_seen":"2026-09-29T04:49:20.065669Z","last_seen":"2026-09-29T04:53:07.690045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/kline","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.894Z","timestamp":1790657296894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":467,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cryonchain.com/kline","fqdn":"api.cryonchain.com","domain":"cryonchain.com","tld":"com"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:16.895Z","timestamp":1790657296895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cryonchain.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 20:01:13 GMT","end":"Tue, 10 Nov 2026 20:01:12 GMT"},"fingerprint":{"sha1":"6B:B3:E7:24:3D:79:11:7F:9F:5C:35:00:8D:B8:22:5E:AE:9A:EE:FD","sha256":"68:5F:EF:25:4A:79:17:15:67:71:C6:BC:03:A2:71:22:63:22:A0:21:0E:9D:DD:69:DE:A8:60:F7:5A:EB:12:4E"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.cryonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://bithumbcc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:17 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bithumbcc.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":467,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.cryonchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bithumbcc.top/assets/index-xauall-upload260921-ethfix260925-xauorder260925-xauorder260925b-xauorder260925c-public260926d.js","fqdn":"bithumbcc.top","domain":"bithumbcc.top","tld":"top"},"ip":{"addr":"118.107.13.102","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bithumbcc.top/","date":"2026-09-29T04:48:10.199Z","timestamp":1790657290199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryonchain.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 11:03:45 GMT","end":"Thu, 24 Dec 2026 11:03:44 GMT"},"fingerprint":{"sha1":"B9:A8:CB:71:F1:D7:FF:44:5C:F0:AC:8B:36:A9:93:0F:D4:28:AB:A2","sha256":"2C:A0:7E:62:CD:28:F7:0E:21:50:2B:82:BC:5C:B8:85:3D:D9:C3:54:10:71:20:B6:A1:E9:8A:83:6F:7F:D7:07"}}},"request":{"raw":"GET /assets/index-xauall-upload260921-ethfix260925-xauorder260925-xauorder260925b-xauorder260925c-public260926d.js HTTP/1.1\r\nHost: bithumbcc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:48:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Sep 2026 12:15:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab7b74d-1fd14\"\r\nexpires: Tue, 29 Sep 2026 16:48:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130324,"size_decoded":33233,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44884)","md5":"3159a60ca1d6daf17bd43bf22310c1cb","sha1":"f1d7c97ef85278dfe9ba4f6fe94b8d6605437b3e","sha256":"40ea0f3173c84240115ed92cdf566267a99e023141fc7cb497f11973b782e00d","sha512":"59f4d40bf6488fbcd8036e26888af2a5df63f3a51d4e5e9b159ba3d18cf574c55d2956577d1222af667e542109f3e66336ac4dd8be8afe5ec09df4b18181c005","ssdeep":"1536:eV9MlugluYluiOMwc4Z3046GMfOjUP3IFm:k9MlugluYluiWMfOgvX","tlshash":"bcd31946765526ee97bd8cf85aa73b1021740dcd807688cbf79c4900afbeeb0d1eb605","first_seen":"2026-09-29T04:49:20.066841Z","last_seen":"2026-09-29T04:53:07.705448Z","times_seen":2,"resource_available":true,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"bithumbcc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}