{"report_id":"ed967c5a-b8b7-456b-a0de-5f55ee067c5d","version":6,"status":"done","tags":[],"date":"2026-03-04T14:31:32Z","url":{"schema":"http","addr":"excbybit.com","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"title":"COINVOYAGES","dom":{"size":24203,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17476)","md5":"8906c777fbd0cd8115adb435b4eded44","sha1":"f2a44231724d4001f149d66fb99cc0724eb92039","sha256":"ebebccc1b613f543c1a8b6a04f1fa2244409d95fd541288aa8e4369956363b2d","sha512":"66015284e8eae0e84e2a6a0191ba763c115dd97d32dd5e4841ae72a37e27710fb9a334b016221614bc5eca2abe73a5f85a0b1f9ca2e6611dca4d443c34be026d","ssdeep":"384:p6aZCxT2+tXKMFvFEFSF3FUFOF4F7F6YFzFHF2TWYxTI:ptQxT2+Hds21cqIB6opl2yYxTI","tlshash":"4bb2dd317200406722a3d6c595717f2afb92f30fc60aa550baff95864fd7cb1ba624b4","dom_hash":"domhash34f1c77b381a74e125329b7e85b52c68","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"excbybit.com","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T14:31:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T14:31:15Z","timestamp":1772634675,"ip_dst":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37422,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-04T14:31:15.276397+0000\",\"flow_id\":642590495108119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":37422,\"dest_ip\":\"47.254.114.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"ysviposs.oss-us-west-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":901,\"bytes_toclient\":6741,\"start\":\"2026-03-04T14:31:14.945175+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T14:31:15Z","timestamp":1772634675,"ip_dst":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-04T14:31:15.283995+0000\",\"flow_id\":1674194394968272,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":37456,\"dest_ip\":\"47.254.114.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"ysviposs.oss-us-west-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6741,\"start\":\"2026-03-04T14:31:14.946384+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T14:31:15Z","timestamp":1772634675,"ip_dst":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-04T14:31:15.285467+0000\",\"flow_id\":611524996656622,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":37446,\"dest_ip\":\"47.254.114.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"ysviposs.oss-us-west-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6741,\"start\":\"2026-03-04T14:31:14.945646+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T14:31:15Z","timestamp":1772634675,"ip_dst":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37436,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-04T14:31:15.290844+0000\",\"flow_id\":61307473784164,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":37436,\"dest_ip\":\"47.254.114.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"ysviposs.oss-us-west-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6741,\"start\":\"2026-03-04T14:31:14.945508+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T14:31:15Z","timestamp":1772634675,"ip_dst":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-04T14:31:15.293986+0000\",\"flow_id\":593896303391111,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":37458,\"dest_ip\":\"47.254.114.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"ysviposs.oss-us-west-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":901,\"bytes_toclient\":1634,\"start\":\"2026-03-04T14:31:14.946567+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T14:31:15Z","timestamp":1772634675,"ip_dst":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":37432,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-04T14:31:15.297525+0000\",\"flow_id\":73344119631086,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":37432,\"dest_ip\":\"47.254.114.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"ysviposs.oss-us-west-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6741,\"start\":\"2026-03-04T14:31:14.945390+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qtapi.excbybit.com","ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-01","domain_rank":0,"first_seen":"2026-03-04T14:31:35.40989Z","last_seen":"2026-03-04T14:31:35.40989Z","alert_count":55,"request_count":55,"received_data":111051,"sent_data":27686,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"excbybit.com","ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-01","domain_rank":0,"first_seen":"2026-03-04T14:31:35.408395Z","last_seen":"2026-03-04T14:31:35.408396Z","alert_count":35,"request_count":35,"received_data":4187783,"sent_data":14371,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-03-04T14:31:35.41128Z","last_seen":"2026-03-04T14:31:35.41128Z","alert_count":0,"request_count":33,"received_data":651772,"sent_data":15353,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"excbybit.com/assets/index-x0ks2Vyq.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"479c3f70b685e221a7065de58f88ef73","sha1":"4c45458f6f75c012c4058aaa3f29a3c941e558b2","sha256":"18b1ddf86562514fa44970ca23a87b04a088aeb63948fc39513563ec0d62daf9","sha512":"93c7fc43588d796f4e600bb3d85d25dd59b7f57f04061d89f630adb24940c42c076d48b191d8df79cc4c07b3c6f2151b5c844d0a78fbcb3e25ae1de87bf0fe05","ssdeep":"96:PtQpM+UwfNvYEbqCwrP9XjuxtPYftIwe6D0K9wjUncF3hr1r3DQVj7uG7PhXTHjT:SG+UwftYwqCwrRj2SftIwzreQncthrJa","tlshash":"b9a1959cb806ce7daabb884044981411655c3ffba11c48e6f7fdac46a3b9ab9d341721","size":4674,"data":"","first_seen":"2026-03-04T14:31:41.100984Z","last_seen":"2026-03-04T18:12:54.308901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-Cj6V_gaX.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"868343255e09a24babca2564ac23e37f","sha1":"1b58bb7ee97ba6806b800739df7993ea70ad0505","sha256":"2940bf8bf71e2ea7113042e6f52b229d3e7131248fa2ace702a18eb327a46d7f","sha512":"e2781acbc1bb2a509ed1a6c243c6b47cc93ecfdc731d513fc23433a59d95c7aad73d3edd21bf76fbbde5e2082f118ad975bdeae4197361d1d5b3fb6997957b5c","ssdeep":"","tlshash":"1511eff4fc0d8ebb1fb2495810902510140d1badebb018e298a77e241bf19a0c78f319","size":867,"data":"","first_seen":"2026-03-04T14:31:41.04849Z","last_seen":"2026-03-04T18:12:54.295267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-08T05:16:21.744552Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-07T18:30:52.990769Z","times_seen":666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dbd1168e5c576753142a8d379d99881","sha1":"9392ac0f7e10298a561baa28dfbfaedf102218c9","sha256":"82732cf6a927f689d178053600e9e572db345471e7b5144a353cc8f90a6a2357","sha512":"c1248d0dc7ca87eda2ab9b87ce5bdf2a609bca6e6cbbfa80790e0f72e46cd8363c6dd32b4f082a555f3f6dcced9977f4480b6845f61b506e767894d600d7d1a4","ssdeep":"","tlshash":"3211abfe291a702d6303804e976b7800652250a9900e1841778cdb9dab9abadd0cfb8c","size":1052,"data":"","first_seen":"2026-03-04T14:31:41.133034Z","last_seen":"2026-03-04T18:12:54.397616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d3f629b34361abef7cb4a2a383c8e545","sha1":"52a2c8889bef17cf6e5a40d8998674d447c97339","sha256":"9c4c94af6a26ed11531c239b6774545bbe8ae9906add8d895d65c1b79f629bfd","sha512":"fcaddb35434280082c8416592e160f7089820101b4d2aa147f22409dcd107d6ada7865e6cb0e9a042859ffac50815d3aa164ff824f89db5828ef225cc136a604","ssdeep":"","tlshash":"59d0c9ee21a294b72576162dd9edff61e4296ef28c0c460e7abc58082fb24041d68c64","size":228,"data":"","first_seen":"2026-03-04T14:31:41.134338Z","last_seen":"2026-06-01T14:37:24.237198Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-08T05:16:21.760327Z","times_seen":3523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-04T04:33:14.485402Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-06-05T10:33:32.161029Z","times_seen":496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-08T10:36:39.375925Z","times_seen":36459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"df55055f75e2187c0c3ffd3298e162c2","sha1":"dc0db5a52df96c5c7636f6c0aef602a6ff8d0042","sha256":"34d238e0facf0645b79ceb771e2969c69c252c99e63f22e7fcd3dcfc6d7ba0ff","sha512":"e903ff7edc9a3fe9051dacfd58d309f38e5f7689fa9749821e071171fee8dded977be371a8cfafd49c12a8e2501483f77fa64b0e732c827d0b5c0cca892cd137","ssdeep":"","tlshash":"4fc08cc4a0c33e102656641054bf25e490244027b0481b468cf4d8493e630b08233e98","size":144,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-01T14:39:28.827973Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4a9d973d1e30085a9546cf6ee49cb488","sha1":"4a80a253e1d2d07b6dede9f69fbd4c2fd3363d20","sha256":"e24c2a1b6b6bdd7e72cf4f795a489b668359a0164e0200e5e6d49fcbb543797a","sha512":"8cb6f53571ce6c05e19a35476bf05b79f1336787b04aeeaf13afa8839dc5584efa86088875fd19d9f6163e6a676accf1a0fa3481475378f6d594b9425b4b4462","ssdeep":"","tlshash":"05c08cc9a0c36d002602641010af38e49024402770881b028ca4d8482e220b08233e98","size":141,"data":"","first_seen":"2023-05-08T19:42:57Z","last_seen":"2026-06-08T08:32:29.207642Z","times_seen":847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/vendor-agZX8Tnr.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"66260ea087474459eb2fa68de9f90624","sha1":"73ca2caab40def75fd3fe65d2d96a3902a7dd9de","sha256":"2d5eefab935086fc18a64af61b3afbdfd7279e3bc315c4486a39227b266be219","sha512":"efbb467f9ddd586c3232559f90c55325d689421f0bdb4887b276590761bd60069db532ad258230bc024e275dc535fd7ad7a4dbd0f0d0e2624e8390f9e61536dd","ssdeep":"24576:u001WD30U2Myh9CsM2HheN52CWGcUqw4P7:u001C30U2Myh9CMgN52CWGcu+7","tlshash":"492538c97292f06147ab24e240bb1007f3396e59740e84a8f169d8eb7d79d89d277f38","size":993741,"data":"","first_seen":"2026-03-04T14:31:41.009321Z","last_seen":"2026-04-06T13:16:59.304417Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-05T10:33:32.173255Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f81cde1cc02edaac86756709f5d073e2","sha1":"ecd25c50d4efae726406014ad7c02fc515041c73","sha256":"35691add9733c28f0c546a796348b3ce80d7eae53be710b250c383a942675b94","sha512":"3d496612c46d8a330775d4eaa21eae67519ab5705180598ff226de3368ac8b54a1ffa842a929518e48a55b6e4f3a6514292ce57b2a7c8b1cf0755ec627cec72c","ssdeep":"","tlshash":"31c08cc4b0c36e002616685021af38e490288027b84c1b039da4e8892e630f48233e9c","size":146,"data":"","first_seen":"2026-03-04T14:31:41.147871Z","last_seen":"2026-06-01T14:31:28.714242Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T10:44:15.712528Z","times_seen":5626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-08T10:36:39.37696Z","times_seen":38747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-DGTQxu5R.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"176d6515414a1e5fa4a87bb80419e163","sha1":"c2f2ecf45601664a8983d1327f3d5a3c20bdf863","sha256":"e6ff3718663bcff523111fa44ac38434d2bea4443dc9c4318e823c32a0042335","sha512":"4cd8c51b42d76d43c4dfe02acb85f2ff3f1c909caabcac994cd93d55675fe497b45b85c9aadfebe45b72096521fa922003595b417c63ec3e1f2a522ecea705f0","ssdeep":"","tlshash":"7cf0051fbd79c4720bb3449ce0631c14b62c1b1927d4c5f4d5870724da789f9d61e114","size":511,"data":"","first_seen":"2026-03-04T14:31:41.041986Z","last_seen":"2026-03-04T18:12:54.301219Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9bbd3fed5d754ed647be94cdd9a54364","sha1":"f7d370ebd314077d8274792e0fc4b5cd84d6b5d7","sha256":"8ca61546e9aa1d8b6fedd4a29e66c384519c42479bb86fd99f4c3d827348492d","sha512":"c670ad6a48be95764fa4a1f1579fd5dfa08f009308525ff9ee964aee378f1b7163cfa13b7c985f48af6b91eeac8e9291a3e00e8af1c314e260ec7301bc6a96ad","ssdeep":"","tlshash":"11c08cc4a0c32e006a46641024ef25e490244026b0885b028ce8d8492e620b48233e98","size":142,"data":"","first_seen":"2026-03-04T14:31:41.152919Z","last_seen":"2026-04-06T13:16:59.440434Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-06-07T18:30:53.001133Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-07T17:52:02.043963Z","times_seen":527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/currencyItem-BbYfGcxe.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"98604661ca8ab3a3f4b16c7f5830b6c5","sha1":"aeb64ebf6cd34b1efc80c82b838fc7e4c0239562","sha256":"551bbaab6edf34703eb3533972aa1c477b28a7b3a0395c460fdec8c093e00c09","sha512":"2f19f53be34b9429f8bd43cb74eca136988318007e13c6f9e24c3d625c63976e3b27df2ca55a6030b428af1e686f426036d0515421e127780f19837916505673","ssdeep":"","tlshash":"2221df89a901cbb1cbbe9162c5bd4804160d7fdab00185c1fbed148a37866fcd724a31","size":1211,"data":"","first_seen":"2026-03-04T14:31:40.998258Z","last_seen":"2026-03-04T18:12:54.383655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-x9glv9qy.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95e0deebd60c830271467c9b1bc06757","sha1":"d324e3516f1884704851ff017c0cafb3e1df4af4","sha256":"fdba0bef08f96305e3486b4ec4a4f30d697a9f958d105ec1c7ef19ad26762fa7","sha512":"8c7475b4a452036ed260066b0e6526a1645389203ec3c50ccb83a0f269b5c1cecec92517ffe162e9e6f6dacb697df04600609bfc844eca06e5a90c92351933ce","ssdeep":"384:dkvwISJvPeoj4ZFV5htfRDjpO5XvSSDnj25FCu2EUpXaAp2dTpuz2zdzMs:d+A8l7ThtfhQdnj25FCu2EUpXaAp2dTJ","tlshash":"3852b649f5069a3df5bba071444c041076197fde900d8ee2b4bd6d8663a3ff8bb4a718","size":13469,"data":"","first_seen":"2026-03-04T14:31:41.080893Z","last_seen":"2026-03-04T18:12:54.30443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-06-08T05:16:21.759691Z","times_seen":524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-06-08T05:16:21.757738Z","times_seen":963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3277ede5cc6412b0a2633d3975b40e9b","sha1":"2aef276eb61487538de792512d00783d6c572c2c","sha256":"d91127f55f401e3a8db80f819eb912752bcd0cd7529bbcbdce8aef0517f6b740","sha512":"9584e041e8965c12fc48b02efd8a532ab97e9565d522a798a172c10b80f6f2ce1c23dd736291a0ceb17a0d407192cad7a566a93c76fb323a7ac86dfc4140d023","ssdeep":"","tlshash":"b9c08cc5a0c27e101612741112bf34e8a024812770482b82cdd4d8482f220f29233f9c","size":152,"data":"","first_seen":"2026-03-04T14:31:41.159065Z","last_seen":"2026-06-01T14:31:28.692788Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.741287Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/charting_library/charting_library.min.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-Bm11JTmW.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"925b53c1cb2b1b17a2c26913d3cd3cb6","sha1":"2aae46a582a07c611fae6a70aad9e6673f88006e","sha256":"8904f0482ce9209397ef77789c45ef6e276c290dd8743247b25a25a2760dcbd8","sha512":"3d3ad8c71e685d5eda29345b830dd09dc7a3a7f1dde15f21493d9c65297fe2fa37923a4e27d12dd6898342f2a242251fab39811d6e3c6f271ccca07b4067e323","ssdeep":"768:Oh6PBPahQVAIEmJVIKNrrbCkIcMapRoScAwgo2/FWEOzNJhCjegc5O4yHcOczF9Z:Oano6IKkjOGS9+2dWEOzNt8yRu0oxwL","tlshash":"98934c89944e0dff99fd04986a5b490021781fd78948cc63b36ead1b3bf9cd4a35a728","size":97483,"data":"","first_seen":"2026-03-04T14:31:41.106Z","last_seen":"2026-03-04T18:12:54.377392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-06-07T17:52:02.05263Z","times_seen":702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-07T17:52:02.029585Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.767001Z","times_seen":1327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"830ab6314a840f40ba25045e25a1b48f","sha1":"670d37f581c4260abd55b1487fe64248500c2d55","sha256":"d70dd2d476c361c47788d33779b32613b94efe3cc93f1895ffe4defad4ae6bae","sha512":"94ba30ae906b87dbbdbfaa9b6a89611a4385104bb172757b8146512176ebb96a80cd84d7d6cb088602c99a5fef9e86f3a8bbe5dc9410c7e482ece6fe83ebd068","ssdeep":"","tlshash":"13c08cc4a0d32d001622685011af25e490244026b0481f438cd4d8493e220b08233e98","size":143,"data":"","first_seen":"2025-06-25T17:53:14.119748Z","last_seen":"2026-06-01T14:31:28.724412Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/filters-yahvghqB.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1963a913e15f6578960368c5fa0edf64","sha1":"d880451c9a5a636d904d09f47122ea651145c25f","sha256":"3da06d09cef5f41e51e261c950412ec5ba2041980d4b8e0e4f81005cb6ca7eb3","sha512":"c08b3559068a875f7ac92f464c8b5461e45fdb2dbad5ca6eb868a8f2a8f34d014eb21d17a8678c784502221c7993ef265cb2602929439499033ecdd7c8237ce7","ssdeep":"","tlshash":"1f5124fdfcd3a13356e96dfd44288514728ebe20686e0a4de55bd0455933888d07f768","size":3078,"data":"","first_seen":"2026-03-04T14:31:41.028524Z","last_seen":"2026-03-04T18:12:54.339954Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.767001Z","times_seen":1327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/#/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-07T17:52:02.048336Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/en-CA18PXA6.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"beacb6284d90ac8471707a7a22fcb138","sha1":"baef70f9ce78115435301e38aa0137e96604e253","sha256":"859a96873fe88753b41cf5ea7a6e88ac6fa1abccea4ee99e8c0136a5c1945e03","sha512":"3fa24e185dfdafb773e8c0ff757f8227b3cf08d8243581fbe9bacc9f231a96868f7e2f1f51368267369e56c325350926acc04cb8da92d82ef6698476ceb1149d","ssdeep":"768:6fSX4tZcEw/o7rrO62sifnAMCMrAaAMFVaP6+ZsPG9w1mwO6fpk7aOZS7:6fSRponrO62bEMrdFVKsPWwqZS7","tlshash":"d513f7897e16989a05f3536774ce2e1120f60ac18255881f4fecc9fd93e2b676367b38","size":42064,"data":"","first_seen":"2026-03-04T14:31:41.031238Z","last_seen":"2026-04-06T13:16:59.41964Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/2f7be0b126f9410aa78d7d7bd4cd88e5.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/2f7be0b126f9410aa78d7d7bd4cd88e5.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1783\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842335EDFF63137A4D81C\r\nAccept-Ranges: bytes\r\nETag: \"B2DBBBC1206254114FFA64F07BCAAA1D\"\r\nLast-Modified: Tue, 08 Jul 2025 07:26:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10981708700216444569\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=2f7be0b126f9410aa78d7d7bd4cd88e5.png\r\nCache-Control: no-cache\r\nContent-MD5: stu7wSBiVBFP+mTwe8qqHQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"b2dbbbc1206254114ffa64f07bcaaa1d","sha1":"c57d73a6dbd555f81354b27b06eeccbde5c0d514","sha256":"b62a6b08461d011bda447ab337849c07a50f574920e0c92d5718359cc7f2bd2f","sha512":"e1028aac4e7ef116198aca883d1f4f725729422afc11d948e9f827a974c04c8a72255760f9fad598ad13a602083588c5f26a0925f1cb41e0faa31796077d98b4","ssdeep":"","tlshash":"c2310beb8e9c60e1d2c825365eee278d6c5687472c61cfcd16d4503a3181c5dba88341","first_seen":"2026-03-04T14:31:40.981846Z","last_seen":"2026-03-10T14:14:14.885906Z","times_seen":7,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":667,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/type/defi_activity_type","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYDG7mIbY4rc9IlBjERKwE1ErusG1akxRRCHUqr4JmVIHGXZGP8z6uYWdZ%2BQYg5gUhyshcgEkyu%2FOd5NaHzMiRRdjZ1uxHgysdJvgpkNKrgvjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71956069e957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-06-04T04:33:14.419392Z","times_seen":666,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/96052ba0d72b400e881b55b013d7f602.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/96052ba0d72b400e881b55b013d7f602.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2974\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842335EDFF6313770D61C\r\nAccept-Ranges: bytes\r\nETag: \"707C6580A79161BD21E05B902CA0D0CD\"\r\nLast-Modified: Tue, 08 Jul 2025 09:54:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 922718883496468764\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=96052ba0d72b400e881b55b013d7f602.png\r\nCache-Control: no-cache\r\nContent-MD5: cHxlgKeRYb0h4FuQLKDQzQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"707c6580a79161bd21e05b902ca0d0cd","sha1":"208d9bb76c3ef99325feb2008927d89961179b0a","sha256":"e0781e073c3d56f16441cc7df722799b7f1b4dec1035dc2f3940cfad5cb972a6","sha512":"6dabc5060d076c74ecc9d2960a2e277d078222ebf2825fb80b049406d234243a0e8ee5ef0cc506bf88208f629228847ca89ef15b9fdd2f151f4a97d6390ca038","ssdeep":"","tlshash":"1a515e8d9850495e10090a7a367bde068a27da84c3586e0cdefe834f8a20d117c75b96","first_seen":"2026-03-04T14:31:40.987191Z","last_seen":"2026-03-10T14:14:14.912219Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":512,"dns":10,"connect":175,"send":0,"wait":172,"receive":0,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/e7b54c1037824cf092354e4c512aff9f.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/e7b54c1037824cf092354e4c512aff9f.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2204\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84234B6DE1D3231F6095F\r\nAccept-Ranges: bytes\r\nETag: \"94AE3E150A36B5FAA034BB8762A18C95\"\r\nLast-Modified: Tue, 08 Jul 2025 08:13:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5886692391462105081\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=e7b54c1037824cf092354e4c512aff9f.png\r\nCache-Control: no-cache\r\nContent-MD5: lK4+FQo2tfqgNLuHYqGMlQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 47, 8-bit/color RGBA, non-interlaced","md5":"94ae3e150a36b5faa034bb8762a18c95","sha1":"ffd223010d292ab4da8b75327b5b2048ac6c6dab","sha256":"1c2f7db14aa05450edc1aafd9130959ceae662ee746db569285bce5b628d3eb6","sha512":"f47b1a0d9d80d7cf5e856f730ba26315872fa4fe10b2333cbf8d9662a1b082b523453c1463311bfd2bf92c8de9e61649b56c62e7d531d903d9af9a89ac3490d9","ssdeep":"","tlshash":"af415b473660b40e26c9903e9162e5cad33d91271225ceb81f160a502c89b01eaf9f56","first_seen":"2026-03-04T14:31:40.994188Z","last_seen":"2026-06-01T14:31:28.629782Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":1328,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getAllSetting","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFx7yvVfWl4efIw3yHaw1F5cvP5gT2vr53F1xWC5u38iJGuzHkzZVKFmV%2BwbspumgbuSw%2FoLy6kpEg0nsYS1aJ25Jf%2F7FaHHfG4pVocPsSknYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955f29c257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/currencyItem-BbYfGcxe.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/currencyItem-BbYfGcxe.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-4bb\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIW%2FBpOUN9c1Jy77bvspsoUdakOzzwD8cnwDLSwyzShy2lp713oTmpwDtjpCbY7YmO%2BtGHPrelNKoMLEnQMJukPrrYeyCbDojWP1qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553c82757e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"98604661ca8ab3a3f4b16c7f5830b6c5","sha1":"aeb64ebf6cd34b1efc80c82b838fc7e4c0239562","sha256":"551bbaab6edf34703eb3533972aa1c477b28a7b3a0395c460fdec8c093e00c09","sha512":"2f19f53be34b9429f8bd43cb74eca136988318007e13c6f9e24c3d625c63976e3b27df2ca55a6030b428af1e686f426036d0515421e127780f19837916505673","ssdeep":"","tlshash":"2221df89a901cbb1cbbe9162c5bd4804160d7fdab00185c1fbed148a37866fcd724a31","first_seen":"2026-03-04T14:31:40.998258Z","last_seen":"2026-03-04T18:12:54.383655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/images/network.png","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/images/network.png HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Jul 2025 02:54:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68634dfa-30df\"\r\nexpires: Fri, 03 Apr 2026 14:31:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slleAadErJYgZQBX24mPush313O8Ryt3%2F9PNrvjz1mE1moLMbhEg46ta43ev4z2EnTX1CMIujV0%2Fxf3izq%2FgvK0V9p34gH9O5V2ELA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955e499c57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8ba5c66f73badac06f9182364be7727e","sha1":"87db0befbe41902ea6151d0cee436c0ff96f197d","sha256":"9948ee53b0945eaf04187d10232ebb02eba61e503592d9f6b6b6f3d05bb0b2e5","sha512":"bd3ed00833bad59364938f77b3f4224bd0b65d0f1bd788a79ad94fe57b899b7ed905e189b9361c16e6cacaebe374c7b79dd178cecd9ec9669aaa46b25682facf","ssdeep":"384:LiwJA2KC/YUNUsIjzaUCHgtSMYM/5IxrVi/ysVs3GuffIYfpJw/7:+EpZ/YmwnCHgMEIpuVs2uXIYfpJS","tlshash":"df42b0e196edf827c4d6adf4a4b1221ed422900966c4ed8d49d331b6e2987df068b4dc","first_seen":"2026-03-04T14:31:41.00067Z","last_seen":"2026-06-01T14:31:28.528615Z","times_seen":8,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/cb877bf98581451c91161674b5692448.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/cb877bf98581451c91161674b5692448.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3085\r\nConnection: keep-alive\r\nx-oss-request-id: 69A8423376EC4B34338CBE2F\r\nAccept-Ranges: bytes\r\nETag: \"2BA6E4C3CDD9350ECFBE3A34F1A7F93F\"\r\nLast-Modified: Tue, 08 Jul 2025 09:56:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4406483576673424714\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=cb877bf98581451c91161674b5692448.png\r\nCache-Control: no-cache\r\nContent-MD5: K6bkw83ZNQ7Pvjo08af5Pw==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"2ba6e4c3cdd9350ecfbe3a34f1a7f93f","sha1":"240ac20ac7124de3ca782ee62c141c3e65e7c5d0","sha256":"615f4ae2ffae8462668792791f1d6cbbd3b565d31d8e6544da1264098891a300","sha512":"1643243e2f324f64942e1c6e769c2f873bc0fdee0a008705c0b91ed2917d30bd16e99b29a6f357bf808717921d7194a6007f5938e4d52adc215a75d6cf718ea1","ssdeep":"","tlshash":"a0515d8d5840452d144d0a7a362bea06452bee94836d2f0c9effc35f8621d107cb2b9b","first_seen":"2026-03-04T14:31:41.003168Z","last_seen":"2026-03-10T14:14:14.911172Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":522,"dns":2,"connect":165,"send":0,"wait":196,"receive":0,"ssl":344},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:16.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:16 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNPfHwCFppFLLaHU6fCn4rT1Yi1k2xma1Rsl21owJUM6Y37ah9MT0SIncXm0JDQPSbGPdaWEEMHzTbezuikTk8iqImfSD9bano7XOyeJxPxNDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7195642a4657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"794ea55a58d4da056097e84282002b4a","sha1":"b437062b56283f4913d4e73c99b6e3c0a7b522fe","sha256":"7222e6c2639736fc074c987147d526007336979342ac9422ee2f7380eecf5d0e","sha512":"4d76f91ffbd788a95fb68eba177d10acd152cc9273a86c805fe90c733622a55181343b564439327fdd18a5b743dafa83fe0e6bb0b74592e3b0978bdc655705fd","ssdeep":"","tlshash":"5ef09e1d143cce760d0688c311c87cc8925f0693d660cd30859fcf5c81f467a0b0b904","first_seen":"2026-03-04T14:31:41.00549Z","last_seen":"2026-03-04T18:12:54.356773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/charting_library/charting_library.min.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:10.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d18-2a6b\"\r\nexpires: Thu, 05 Mar 2026 02:31:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVTr0e4QV%2FopGpwO6NZjoQZZxqr57QQp21xRB0rIop3tH3gMXbLjAHS5WNVFrlx5BbVGbm193FP8XqMxBa0kLntl0u39ORSCGEPjag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719543fd9d57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/vendor-agZX8Tnr.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:11.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/vendor-agZX8Tnr.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-f29cd\"\r\nexpires: Thu, 05 Mar 2026 02:31:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EA7kdqljH5H%2BfqDK7F82H9snEnHz8J1biSB2s6l2C%2BCSZYtSub%2FelF09Vg710cM0rUdGAqBkvsUVKvt2COoCl%2Ft9xIZUGN%2FyY8tmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719549de8957e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":993741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"66260ea087474459eb2fa68de9f90624","sha1":"73ca2caab40def75fd3fe65d2d96a3902a7dd9de","sha256":"2d5eefab935086fc18a64af61b3afbdfd7279e3bc315c4486a39227b266be219","sha512":"efbb467f9ddd586c3232559f90c55325d689421f0bdb4887b276590761bd60069db532ad258230bc024e275dc535fd7ad7a4dbd0f0d0e2624e8390f9e61536dd","ssdeep":"24576:u001WD30U2Myh9CsM2HheN52CWGcUqw4P7:u001C30U2Myh9CMgN52CWGcu+7","tlshash":"492538c97292f06147ab24e240bb1007f3396e59740e84a8f169d8eb7d79d89d277f38","first_seen":"2026-03-04T14:31:41.009321Z","last_seen":"2026-04-06T13:16:59.304417Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1265,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":726,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-CELVDPN0.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-CELVDPN0.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69a5286a-1cb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDpb6eXdKpIZUCHBE2IFmjRQlKaX5nb3vBTEH7WfqOoK3YVulStorquUBJTW4gPMzCgpo144cTaOtC3CWnIIykg3gRRLTZC4aqAYXw%3D%3D\"}]}\r\ncf-ray: 9d719553a81457e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (458)","md5":"ed0808051f5cd16efff130631ad6066a","sha1":"67ffa6fca5caeed6814100d7000b8b31d12e9b0b","sha256":"de65235c78a21c3662d6bbab54cb3b47cd18e01b1cb7a5f396d94c76326130da","sha512":"bcc19eaf7615e0e8a1345cf9e42532a37a00475a84308710dd55ac24e65c51166ac8717fad4a3f8ab7b6caad4b3ed212dd1a91c7ef88fbeb9f3b4181870455c5","ssdeep":"","tlshash":"fdf027d471dd817f763b926821ac5759c058ad55dc08bb7ce6bf6bb40bc39c470a1210","first_seen":"2026-03-04T14:31:41.011414Z","last_seen":"2026-06-01T14:37:24.234406Z","times_seen":10,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getAllSetting","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9Zwhce5NzZmABavx9FXVb5dzqjjcGN29UAudPqgXg%2FkVprs%2FEJaAT7pwO2CzeuvtlTEh1be54uEn9FTXkkJWPXIO1TiEi9GGxn63mQ6O8CW7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71956059e757e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16300,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3074d2262165b54d963beec12acdfa21","sha1":"733f6977eaee1a43da8cc36c4d6e2906a8c66274","sha256":"849ffa67c1fe211935e75dcd41d7c0ec1eec1b40843ee179c4ba9d3085e97d25","sha512":"dd613e5f44e3ea69cf53c0406258ae8b9eccb65c15d7fa1e2a96da31a989bd3135a136817af6b4a93177b8226cd366c677696abde3adc6a3fce8252a06175101","ssdeep":"192:Nmh/HGLdqdo1bBfOSpB4sQS+O+Xc2CSDf9XxNNTJTqvS0HzX2s03soFMNEobKoZI:mJTTMr2DhM6OY4YT","tlshash":"5e72545936a8dcb9a3c739ce25db77852b5c3863ca48a846947eff1cc4c59b64c8b04c","first_seen":"2026-03-04T14:31:41.013225Z","last_seen":"2026-03-04T18:12:54.311742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=cl","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cl HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwyY8huiplMC1%2F3nCbBhqeE7ybiZIZdWK0B6mAeqSfSUsp%2FD8Pul3Qg%2BszdIqMbcaWmAyJEKbRgZtYJ633mXsVs4eqF7vxxi5mPRIWtJS5TV%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938d757e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/litecoin.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/litecoin.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84234E901193739BE6028\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.293479Z","times_seen":630,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":972,"dns":0,"connect":0,"send":0,"wait":308,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/7f66df546dbc444aa3fbec4c4644f1ae.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/7f66df546dbc444aa3fbec4c4644f1ae.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1775\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84234B6DE1D3231C5055F\r\nAccept-Ranges: bytes\r\nETag: \"E5C82473B9980922C4F479C9CF3298B1\"\r\nLast-Modified: Tue, 08 Jul 2025 08:10:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3918002229547330505\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=7f66df546dbc444aa3fbec4c4644f1ae.png\r\nCache-Control: no-cache\r\nContent-MD5: 5cgkc7mYCSLE9HnJzzKYsQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"e5c82473b9980922c4f479c9cf3298b1","sha1":"16f19dce720309a896e8fc660b3c5675e105ff33","sha256":"b60a8e87d8ed40f3d59e8032e162da88944c47452f11727ea9c0ff8c197a934b","sha512":"500c4dd5e71cb9599d6ef2649e043ea9f4b03f1a3ce919e6dbbb42ce4fb92d412d9019b2149313d356a59176779d4c73d1475908570eedf5d3cb55acb968f00c","ssdeep":"","tlshash":"4631c50eba221c405780e09201f890a79a329861e690fa06becfc0a097552fb0c3d8e7","first_seen":"2026-03-04T14:31:41.017271Z","last_seen":"2026-06-01T14:31:28.553666Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/bb90e0a1b69b47c5aaf88c39ca727b23.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/bb90e0a1b69b47c5aaf88c39ca727b23.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4123\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842345EDFF631377BE11C\r\nAccept-Ranges: bytes\r\nETag: \"4B37F886959B0F0DDDECE2D1B8CD9151\"\r\nLast-Modified: Tue, 08 Jul 2025 09:25:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5744227249982487757\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=bb90e0a1b69b47c5aaf88c39ca727b23.png\r\nCache-Control: no-cache\r\nContent-MD5: Szf4hpWbDw3d7OLRuM2RUQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"4b37f886959b0f0dddece2d1b8cd9151","sha1":"5484b3f98dc586ed519ec902e64028d0548de713","sha256":"83d4f756a2c23be2da779895a339eb0873d4b6fab8c51630a4f65095e775097d","sha512":"1636ede9c05b64230c9bb9b35a262bb2b297742d442d0ffff79ea7c91bbd076ecf1a84a8f7fa45fe04e158a9a0ec73c5f4116d209cb30de9db03fb95ea61f2ba","ssdeep":"96:tHhZfXpYbD5jjx8RCX3vRyFQgug+RYqORRBE8pyNX4JUL4HOe:tHb5MD5B8RC5yAdRfe10NXQ4e","tlshash":"7c817d75574042eecbf9bd414348053a92fd2358a6cac07a4e3ddb78855b60c17ebaa3","first_seen":"2026-03-04T14:31:41.018915Z","last_seen":"2026-03-10T14:14:14.936259Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1461,"timings":{"blocked":1291,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/platform/dev/config.js?1772634673162","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /platform/dev/config.js?1772634673162 HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 25 May 2025 23:16:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6833a4c2-ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEWqqwXwwg9SAwALbTrGsTrZSmS3YLAwFKeRrAa6ZgpAOkfN57AYhHJheu29YK7JdfYKkRhTDyw1XivMazXis75cn4UBNUtkX2Oc3Q%3D%3D\"}]}\r\ncf-ray: 9d719553680657e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5b4b516c18624c94e92e8f30552bc56d","sha1":"a809c5b9193c12945f7e50eae3c8a97756f6f1b5","sha256":"e0cf9bd5a4e1cecb75b41fad76a8277dcb0e25cf1ed1246a8540a0a3bc5f6d13","sha512":"bc3afd938b8803685912c6ab83439086b2a61ad5363d93f25cc71063b3ff67a6a8fa3ce76c859c308ea52da3b9b854db46a16ed9f11d13fb9440102d7dd6d2b7","ssdeep":"","tlshash":"1fd012ed216184f72035162dd9ecfb21e4296ff38c0c010e76bc180c2fb24040c64c60","first_seen":"2026-03-04T14:31:41.02061Z","last_seen":"2026-06-01T14:37:24.218473Z","times_seen":10,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=si","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=si HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Im0Z8UzdxEn9FChg5gtIgH9FOxxMjRt5E784fp6NN00BYKUFmu%2BNc622RWkeFYse3dzgq76pomlY6%2BL399lyt4SoR9Ivwhgldrfc7XB65QP7EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d719558f8cb57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=ahd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ahd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgaD%2F6b6uoWJxragUJ5g19oaTKFK1EWlifwjgWjmzm8nwBV0%2ByGl68TJyWioREBeyOURrvFlnSGy6LbikS0Vy94Y%2B%2BOduU%2BKTU7HsOKdSxLA0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955918d257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=oil","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=oil HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rCrXi2GwrPEHparuT7RvmC%2Bk0HpQ%2BETHPNAPENHdLhb87fvtvaExEHZ68lOi8szxovOJKMphZBzP1r3L8ggBNcln%2BDBSzCWNe%2FsLjY6BlJKbPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938d857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=fcpo","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=fcpo HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=um7txDgK7B3RqOkU6oimlE7bV7zXfHPbZ1SmC%2Fh25py3gHLd3rNoQ9hgv5Zv7aFMRChD0Y1tzO%2B%2BGvw3fjw1e2HxmJr7fGxw5LsNc%2FqxajUtLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938da57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/solana.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/solana.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233B6DE1D323157035F\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.294395Z","times_seen":678,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":834,"dns":0,"connect":0,"send":0,"wait":181,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/1b8f8091d20248dfaa6130ebbad14c39.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/1b8f8091d20248dfaa6130ebbad14c39.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1836\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84234E901193739076528\r\nAccept-Ranges: bytes\r\nETag: \"F5862A44312EB098CEEA9112C0EFD01E\"\r\nLast-Modified: Tue, 08 Jul 2025 08:10:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5308235651280897402\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=1b8f8091d20248dfaa6130ebbad14c39.png\r\nCache-Control: no-cache\r\nContent-MD5: 9YYqRDEusJjO6pESwO/QHg==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"f5862a44312eb098ceea9112c0efd01e","sha1":"37ae62acdded3882d1c25f2245b142d7cb670221","sha256":"5d5d2a082ed0b7f449a1dbf4af1f000b54030c0236250f04f00c670f475e1c0e","sha512":"491d4e6a2d7895cbe6c30cee2d963ff66501efd62cc90fbc977b0f48918f47dc12980ea522406e94bbadbef5b75b6225de0ecfc437184db0568ca59448a87571","ssdeep":"","tlshash":"a931f90eb90c4900e148b3b224f5d8116e2947904e52f562cecdd463cbba1e60d6cbe7","first_seen":"2026-03-04T14:31:41.02402Z","last_seen":"2026-06-01T14:31:28.648307Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":1266,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/79a353e0a7ab47c595af0c31efae1bd5.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/79a353e0a7ab47c595af0c31efae1bd5.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3427\r\nConnection: keep-alive\r\nx-oss-request-id: 69A8423476EC4B34330CC62F\r\nAccept-Ranges: bytes\r\nETag: \"6B7F47EB66304E73CEBA13D9F89F75A4\"\r\nLast-Modified: Tue, 08 Jul 2025 08:11:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12260307345160880229\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=79a353e0a7ab47c595af0c31efae1bd5.png\r\nCache-Control: no-cache\r\nContent-MD5: a39H62YwTnPOuhPZ+J91pA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"6b7f47eb66304e73ceba13d9f89f75a4","sha1":"9f0184213683edca4c34eeb76ff9fbc48415c1eb","sha256":"876fce250654e6cf9a11b5dbddf5c4413af9087b2e0a51a45d7cd542861f9311","sha512":"5a663b231874239401a0489b0f73f9c7d4594a45b2c438d13580d0f72857e6cc5beb45cd1448005bd9424f03f1d9d52882c45e0a21317c9c7a964a2b2455399a","ssdeep":"","tlshash":"c2614a06f8809e01e9eee90171e6b69ba5260a4407c185f9ad47cc2b4c6c1764ae99ef","first_seen":"2026-03-04T14:31:41.025484Z","last_seen":"2026-06-01T14:31:28.534293Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":991,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getCoinList","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"104.21.69.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZaBr1FjYpLaZa%2Fp1bGSr0g%2FRbswODlp10ygdKaSFMC1%2BJ46g%2B96fzj5XEjn4JoamLfmNCxdQp4TVg74rihrM53rSOfBk%2Fpa1VrbsylpW4rlNvQ%3D%3D\"}]}\r\ncf-ray: 9d7195575ba4ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26890,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b6c77141f099014c2a73ffecd94a24d","sha1":"9bb4858ac5dc6fe5468358a64875a0f2224ddc87","sha256":"6ea6bdd27ae10912fbd4c5d899b43831fe547dc059b016494156186e3255d3f1","sha512":"9f4b0e5119ac90676c9bc6da1125e93b7284d87f6434eccb9d56b87d15a78f4d50e6cdeedb2080824355b94bf31a8d6884a0c6e4151b8416b14b0284f094c82e","ssdeep":"192:iXZEXtLX4yXjiXXXX+lXaHPXd3XMP5XHrXp2XfLVXyVXQnXtQSZgue64EHI3CQE4:EKC3RFEFPn","tlshash":"8ec21059652860bcd674d0e51eab7e6312cc346fddc94a1ec3de4988cad4ff21a0bb06","first_seen":"2026-03-04T14:31:41.027229Z","last_seen":"2026-03-04T14:31:41.027229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/filters-yahvghqB.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/filters-yahvghqB.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-c06\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6w3PWvdcC0J%2F%2FVUh%2FWXgGFd4W5KR4y0ddfjHb0LLolQNLLH176Nht1tOkExlfmbekBN5i%2BlEKiCcY%2F%2FqZWAD9qm82BI0kak%2BHeXjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719557789e57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"1963a913e15f6578960368c5fa0edf64","sha1":"d880451c9a5a636d904d09f47122ea651145c25f","sha256":"3da06d09cef5f41e51e261c950412ec5ba2041980d4b8e0e4f81005cb6ca7eb3","sha512":"c08b3559068a875f7ac92f464c8b5461e45fdb2dbad5ca6eb868a8f2a8f34d014eb21d17a8678c784502221c7993ef265cb2602929439499033ecdd7c8237ce7","ssdeep":"","tlshash":"1f5124fdfcd3a13356e96dfd44288514728ebe20686e0a4de55bd0455933888d07f768","first_seen":"2026-03-04T14:31:41.028524Z","last_seen":"2026-03-04T18:12:54.339954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=rss3","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=rss3 HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uX%2BjOdIrOlxtoTGa2fHZVEGwCOfOPOxmdJ%2F%2BVxNXytPwCNVh9Vd3dMU9ZvRADIL1xi89ksHEGEE6HLC6CTWgdF70wKyczPzLQ%2B8%2FGPIFobmRtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938db57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/3bb90a37b5f948e08924c3c809c55bd9.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/3bb90a37b5f948e08924c3c809c55bd9.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2373\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842347540EB3536E98546\r\nAccept-Ranges: bytes\r\nETag: \"BEDEB4328345DAB3EFC16EF5D8E3856C\"\r\nLast-Modified: Tue, 08 Jul 2025 08:11:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14686584944911720841\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=3bb90a37b5f948e08924c3c809c55bd9.png\r\nCache-Control: no-cache\r\nContent-MD5: vt60MoNF2rPvwW712OOFbA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2373,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"bedeb4328345dab3efc16ef5d8e3856c","sha1":"93408dd1b7dc0e9fbc8ae5691dc7f08e4afb74a4","sha256":"9ce29b6eb4405da6f45edc2cc7742354aefec8e6825fc6e3014508fae4aa4c04","sha512":"6c6211dc86c29352c4b23630ef30e1d6423dcfecea23414a378eb224dae00805b4688d1b5f853204d2565cfdca140e3db0a15dff86c56aefb9175e6490735803","ssdeep":"","tlshash":"ff41e85add623a12c2aa8720e5ed601bd8175f82dcf1f2ee9a6be40318202c7958c5d7","first_seen":"2026-03-04T14:31:41.029864Z","last_seen":"2026-06-01T14:31:28.584977Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":1287,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyaQ6BrvWzJ35MAcJwpbQ4O9mWvCvz0PRMQyvbU6SOFrQuT6CnnvKEO6R9B3uwrfJ5N055sk4YZAfyTTnjXYY24jK0H2xsMgc%2FNWIMk0Vw3d0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955f19bf57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=hg","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=hg HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDdrw1qXndK24FeVwAQVm%2B4briiU86deiTPyKrpfr%2FAD%2FUYvg00oHr0uCUUOCdugss2DOxXysCA7f8DXSmXTXSrxG96yjSoSQupYbpXXiFF7Vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d719558d8c857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=gc","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=gc HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITrnniclAPE1zZXxkE66mDVo%2FhwdTGZLQRXV9byzhbR2lVQYh5NOwRfiO5pYiEnpbhf3BUruqpd4E358KIQ81QsDX7ziPo87R3mfulnqR3FA9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d719558e8c957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/en-CA18PXA6.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/en-CA18PXA6.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-a450\"\r\nexpires: Thu, 05 Mar 2026 02:31:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNioIQessTvfZZ%2FKYdAHr0KhclhTvt7kswRvCUVvnWzJ4iRRgyqUOQj3s5DTMpf393xOS4GzlyZTQs%2BVcPw22m6Kyxc69IhLYhA7QQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955948e157e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42064,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42035)","md5":"beacb6284d90ac8471707a7a22fcb138","sha1":"baef70f9ce78115435301e38aa0137e96604e253","sha256":"859a96873fe88753b41cf5ea7a6e88ac6fa1abccea4ee99e8c0136a5c1945e03","sha512":"3fa24e185dfdafb773e8c0ff757f8227b3cf08d8243581fbe9bacc9f231a96868f7e2f1f51368267369e56c325350926acc04cb8da92d82ef6698476ceb1149d","ssdeep":"768:6fSX4tZcEw/o7rrO62sifnAMCMrAaAMFVaP6+ZsPG9w1mwO6fpk7aOZS7:6fSRponrO62bEMrdFVKsPWwqZS7","tlshash":"d513f7897e16989a05f3536774ce2e1120f60ac18255881f4fecc9fd93e2b676367b38","first_seen":"2026-03-04T14:31:41.031238Z","last_seen":"2026-04-06T13:16:59.41964Z","times_seen":3,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=cl","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cl HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5LlaQMMie7LNJrSJj7bFpQzmvq18tnPY9S%2BRm0vbTqul%2FHa%2BQ%2BTauJzsdV8W%2Fiihp9%2BIpqOYcZnb1FcqlyfRIObk8iW8zQqsxjGIwiikZHoLAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b493a57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6c439510c5962488877e606288f7060","sha1":"1d54ba4de0738cbf41a55486aa73bc1ae016eb75","sha256":"9ddc4e3b646da49b5149e865ec71480165c7656cbc3bd63014981647045b55f7","sha512":"36417b7de5f0262b374501c5a58b63239bdb72a3433b6800ca86560f4ecea5bc31afd9361cf3925ff87d70c232b8413c4eec6421199a2114a2eab0237391fb48","ssdeep":"","tlshash":"699002555c1c8282a8c304a5a51a560500243261262493484c59512580881a22045858","first_seen":"2026-03-04T14:31:41.032479Z","last_seen":"2026-03-04T14:31:41.032479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xpd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k35t9yRsTNEbAn3DgDnEMtxdvnPMENrqDo0pjle%2B6koiT00BuuQ%2FEc9pfy0P8igh8v8kwe31x7S3nXvA682ePJ4szIGH4ftJwtbU70RmgxLYIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a390c57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5cc2598ed12d414181bb62175a0604b9","sha1":"f7dc927d8108ebda28a68c9ebf55ee4a5dd9151c","sha256":"1ba083c699a980d1f49d8c41a081ea0e1d022fade707457a43ccef4c71ba93fe","sha512":"f801a5e6d23f09a279dc00e99c165260c166784796029b7a477e41ada943889994633faef90b088a4402eae48c28de6af1b89a6bae664a4df0c0a2c8ca7762f9","ssdeep":"","tlshash":"d49002556c1cc256a88300a5a50a1204002435602624d6584c5a512591881a32044898","first_seen":"2026-03-04T14:31:41.033749Z","last_seen":"2026-03-04T14:31:41.033749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=pbd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=pbd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XOtjUJozXHX9sIjlkidMcL6GeG8mdjd7xIcoc2AJtupLFnfEKvYLw5K8%2FF2%2Bj5mg1ar%2FB5piGiloaUzqQ5qAPjrSgCrA89Z3oU2xuB6ZCndZGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a591657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"75eb3e375454066c8e9ca03787b389f3","sha1":"cfa46017fcc5bbee8c0ac611a03bae7cc404b793","sha256":"3ff304c5d0b3566cb98a4a4952b50fb5cf23310ae4195edf2f436daeb5143b6b","sha512":"b03144011c16c0f6daca7e063551b2a5c2c760d4375950a7746f3b1b8ae8880685fd265c8015c5ce57e3f8ca2553d1a94fad28ffefc26afb5bda3ec0ad873911","ssdeep":"","tlshash":"849002555c1c9242a8c304a5950b120404343160266592484c59512580881b26044958","first_seen":"2026-03-04T14:31:41.03488Z","last_seen":"2026-03-04T14:31:41.03488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/images/banner3.png?2.0.1772431467216","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/images/banner3.png?2.0.1772431467216 HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 23 Jun 2025 20:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6859bcf0-2079a\"\r\nexpires: Fri, 03 Apr 2026 14:31:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9phrESw6Qdqqj4wIsJQ%2FM0qIKafyfTzRQArLknbibtzJOQAnMXv9dVOgj48ZqX5GZvAPMPoDLzC%2FSD8EA36hzEd8FhGpipxIief4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955f39c657e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133018,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 689 x 302, 8-bit/color RGBA, non-interlaced","md5":"b6b5184c4feb3a349c32027eea4755bf","sha1":"d2e3da25fffb744521d7869b18ee165f5ec2fb63","sha256":"3d2bd28c5c25670432751537ac0ab0369bd6445bd5c2885b9cbefcee3037cfe0","sha512":"866f9f6b0c74108414613fd40df9adddfec3d2b1134fb52446e67e9bc0cdd46ad6a473421aaa79cbe1dfbd491c6cd212f4e3dbc7c95b8aa0436a50ed032c8772","ssdeep":"3072:iZwoa53xtlxC1uiRpEKjA+CJNSJYJizaYar4DAVhaNB:X5Bt0rOShzar4sVh0","tlshash":"9bd31370e57e4383d58ca5d021ae84659e3d79ebacb0fb8f552e248b48103d6f671d43","first_seen":"2026-03-04T14:31:41.035894Z","last_seen":"2026-03-04T18:12:54.380319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-MmqlATds.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:10.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-MmqlATds.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-4b2cc\"\r\nexpires: Thu, 05 Mar 2026 02:31:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqB9U%2Fhy%2FaG2ACDwmu6PFjMGd2rl77J%2BVmyoTiZiHpBg%2BULARh60b4WpDjZRQfqd%2BBUc87hGvQcmAZkkTh3WDqExiW%2Bf1QZ2XvS7oA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719543fda157e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307916,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f8a765ec30c20a97a1f4588f0937db4a","sha1":"c8f8823bb37634fb9ba64173143fab24faca8bd7","sha256":"983bf31d21d4c7919d88088558f362f595200add7d80fab32325ccf741cabd74","sha512":"c246d20c42cdfc98aef9c20d07966e0735ab413af3f58164e5c9468d1f6c906c087d72eb20e83ae3b774ffdbb7d5ec0d98f16a299f801980df0a4a8e53783ef5","ssdeep":"6144:nR/xsaz9sKWkZ8w71ZACkFDS3vyf58rBeV05TV:R/1WKjZ8w71ZACkFDS3vyf58rBeV05TV","tlshash":"a664e899a59011bc6f27aa759bce4ad8f23ce6719c118de9f201600a4fc3ff91363617","first_seen":"2026-03-04T14:31:41.037147Z","last_seen":"2026-03-04T14:31:41.037147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xau","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZ0bXDwWyWWEFxx7Ytr1JKSvV4s9ubnamsPsYvAC6cRW4M1LMYCgy%2FUFnTjRtW0zejR20NY6orceAREeFSzE6u9cKoMId1xXSOB3bpWTIOctIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b594257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e4361599cede2199cb3898fc5725bcf8","sha1":"358fe95588244b489228fb2de20b0726af264d96","sha256":"a07a375c2e5f400804db9ad15b577173db9bb54b9b5d01685a94de7a83340ca3","sha512":"d5fa9e9ac294aa51a37bf2c6513ecdf0b0957d023a8da124c5a94b08390330920e9cd26e325a194ae32073dde5bd929840d8e15554e541da86a322e94c681819","ssdeep":"","tlshash":"8290025d5c1cc282a88350a5950a120880253160262592488c59512590881a22048859","first_seen":"2026-03-04T14:31:41.038341Z","last_seen":"2026-03-04T14:31:41.038341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/type/defi_activity_type","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GeZi9hBSBD0fwJZWqreC%2BmwDahq%2FWocgSjmZfVwfvoPrskDaXFMzEWc%2FplpX8FKtUHiIugi8k%2FR1lZCUUrVd7QS4UNAc9Nij75HO3sMCRnPHaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955f29c357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=zsd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=zsd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsqtJTafjk6ieH10maB1LDlFQo1ZC1ervyTbBEUOMp2vwMjHfjr4n4MHBkAJGSsojoEt4zlRLvQBU6jOgx%2FWiGoUKyuObMncSgx8c3aHELk4nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938de57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/56e1631f70dc43b5af9bea5573132ee0.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/56e1631f70dc43b5af9bea5573132ee0.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3743\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842347540EB3536BB8346\r\nAccept-Ranges: bytes\r\nETag: \"744C6146D169048234F9EC2A7219D926\"\r\nLast-Modified: Tue, 08 Jul 2025 09:25:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13923890250281802767\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=56e1631f70dc43b5af9bea5573132ee0.png\r\nCache-Control: no-cache\r\nContent-MD5: dExhRtFpBII0+ewqchnZJg==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"744c6146d169048234f9ec2a7219d926","sha1":"ad98c9f41ce66c11bf255dab15eec8effdd070d0","sha256":"f42d69bc3c5ceb8620b18da2701c92911976e9916f56124b3301fd70022f96bb","sha512":"bee315dad84371d1937b8aa4846e9c9bf8f96d292e43573d8031190bf7426a758319eb24d1694d74def4d36152839db88b9d0d79c3703eec3fa836b64c59dc3d","ssdeep":"","tlshash":"53718f9de811452a100e056d2e6fc50a4f6ba78c838aad5ccafed20f8a10c513c72a77","first_seen":"2026-03-04T14:31:41.039608Z","last_seen":"2026-03-10T14:14:14.884461Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":1108,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpqEmB8WjI2akfx%2FHcGqaiK2lp%2BPXfpVhm9o4rSUwGtrfxvT2wrsxZ0qZZpiXbS2IPxqlC4iRAMvM5XATh64kHFkm2zQxwAENsPMN6H%2BXytyig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71956049e557e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2527,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ee40229695f666340de007f101fda150","sha1":"004a02973cd00965a84fd8799084d838751e43fa","sha256":"d1d38928a092d248c2b8185e1602166ddc37fd2b161643b5dcc654060b65da6d","sha512":"f09a4a51ef151e68f9cd8fcfbe202daa561353c483bd0cf776bd59b6d6c55afba2ba496d6ed6914be271ea3d10e39ebb950941fc22d98d17f4d8dae6a434d4f9","ssdeep":"","tlshash":"2e514a0f15788eaa09044ccb64ddbccea69e1a8bd770cd30966bcf2c45f59bb0b1b548","first_seen":"2026-03-04T14:31:41.040837Z","last_seen":"2026-06-01T14:31:28.536833Z","times_seen":9,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=ng","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ng HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZB52ee1VLmJgWOcDIAQtIWIJkx9%2B5nn%2FC346YJuVi0C5bEcvGyuRC5QRXuuC3D1%2FhtjuqhxR%2BYMPDhLlTc%2Bn8ZxtS9HKXuYsmJN9WMN63cAVpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938d957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-DGTQxu5R.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-DGTQxu5R.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69a5286a-1ff\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucy0iDTsCs2Ci7iAPxZhNDiJrgwtfYe3y7b1TWxHakVi%2FoVenqomD3Qil5T7DpDnGksq9YUmB2ToTV03nmGm53dmzhuFbZykVLyWSg%3D%3D\"}]}\r\ncf-ray: 9d719557789c57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (510)","md5":"176d6515414a1e5fa4a87bb80419e163","sha1":"c2f2ecf45601664a8983d1327f3d5a3c20bdf863","sha256":"e6ff3718663bcff523111fa44ac38434d2bea4443dc9c4318e823c32a0042335","sha512":"4cd8c51b42d76d43c4dfe02acb85f2ff3f1c909caabcac994cd93d55675fe497b45b85c9aadfebe45b72096521fa922003595b417c63ec3e1f2a522ecea705f0","ssdeep":"","tlshash":"7cf0051fbd79c4720bb3449ce0631c14b62c1b1927d4c5f4d5870724da789f9d61e114","first_seen":"2026-03-04T14:31:41.041986Z","last_seen":"2026-03-04T18:12:54.301219Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/platform/dev/logo_144.png?2.0.1772431467216","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1772431467216 HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 May 2025 08:11:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68302d9a-3140\"\r\nexpires: Fri, 03 Apr 2026 14:31:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ga7jD9ZpXkKVsLSHb0SjShV%2B6bvH%2Benfv2Sx11MV3WoivkGP416g%2FDs5Osx2jUPDLKgC%2FuP9zEidOLGQj6Odhpq205mFjox2XJ7%2Bgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719558a8c157e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"b226459a559caff66218577c3693d397","sha1":"4cda68005ec3a4e175943119a08db8bc6ec2773a","sha256":"ec205b8009013a3dc271a02be019ae29cb6e81fee986f752dcf082ee679a0e46","sha512":"b10299ea80b8f924f6cd56e2ada8fd553481326dbd2ed9d9ebeeed73ac036731d4e3af0c6b52f7cacaeab10692295021a413fc2c9fec9a6ff2924b5b2c39d78e","ssdeep":"192:MSHIIHUCD4waV6tpwnzaelNDPYXfQG7mfTfH2StvjTzJYUf3xjHKuEO9XNjzUA:L50wiApweytk4MwJ5Fn39qu/91d","tlshash":"7c42bf4dc8ee3cdf560986af617d10ae4e03351cd202fd0960fec5e68954c953ea955e","first_seen":"2026-03-04T14:31:41.043394Z","last_seen":"2026-04-06T13:16:59.337576Z","times_seen":3,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":748,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/d8e90117a3984323aa33a130b63f7be0.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/d8e90117a3984323aa33a130b63f7be0.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2076\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842345EDFF6313741DF1C\r\nAccept-Ranges: bytes\r\nETag: \"D50640AAD6A153ACEA2B0949B7D0B83A\"\r\nLast-Modified: Tue, 08 Jul 2025 08:14:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8383145769139948042\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=d8e90117a3984323aa33a130b63f7be0.png\r\nCache-Control: no-cache\r\nContent-MD5: 1QZAqtahU6zqKwlJt9C4Og==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"d50640aad6a153acea2b0949b7d0b83a","sha1":"c4e3dd80aa9c3958e8b06747070704aa9899fd93","sha256":"4eafcbe7a6366d951c868c5f4f1e22697f4c1d90b0af79f54ebcde4e07163518","sha512":"22a8c5031bbc69f130e080d7abd102133f5fdbbe7d76189241eab12819fd4ec3a0d0aa2d63ad08196cc2868886d3a505b2c04258b60a5301bb2dade0a53ad08e","ssdeep":"","tlshash":"47414ed283d39ebb5276f31881800a2ba270beb055fd7c092dcde8716638944575abe7","first_seen":"2026-03-04T14:31:41.045573Z","last_seen":"2026-03-10T14:14:14.975186Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":1116,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/images/banner1.png?2.0.1772431467216","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/images/banner1.png?2.0.1772431467216 HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 23 Jun 2025 20:45:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6859bcf8-1bc2b\"\r\nexpires: Fri, 03 Apr 2026 14:31:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08nr1DRDqlxw8SB%2F30YOzTEMEnvNDargfiRCXRdQ6iCQUeCg4o%2BZrDpADBL3ttTclXNCZNjzMnSlXput4Lq7qLBA%2F%2FTT9pEq%2B54fXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955f29c457e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 673 x 291, 8-bit/color RGBA, non-interlaced","md5":"26dc66098bb0cdbba2cc01501f3807cf","sha1":"a32d945dcec4f802d85a11fc513679a8198313c5","sha256":"f940a776b9ba428b8bcc6d449945ca1a23b4ae58503bff24dc871b4df093456c","sha512":"f967bf4c821f6ba0133d195a22fbe579c964ac90c1d0fe631b368768294e114eb54379e40bbc9d91d0372734ede79b5bed8ff026817493e29a8f86397afaf311","ssdeep":"3072:C6gXW2YQLmLesVppPFaj0816a/vxJiCMPfmC:C6gFYTtVp9Faj08Ua/ZJSPH","tlshash":"38b312db1495cc51cdcffc7bf09a11e41a3a0de1a96bc8092207541e23b57fe469baa3","first_seen":"2026-03-04T14:31:41.046991Z","last_seen":"2026-03-04T18:12:54.387962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-Cj6V_gaX.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-Cj6V_gaX.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69a5286a-363\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKp1pF09Zog4wKW3arEmOB4Kztgi6OCD%2BcFYWyqYv1TMJsVyhfYzryO1opAFJQrudxAI1piGx0wddBh4vHA%2FKxkr%2FaLQKep05gxYXQ%3D%3D\"}]}\r\ncf-ray: 9d71955788a057e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":867,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (866)","md5":"868343255e09a24babca2564ac23e37f","sha1":"1b58bb7ee97ba6806b800739df7993ea70ad0505","sha256":"2940bf8bf71e2ea7113042e6f52b229d3e7131248fa2ace702a18eb327a46d7f","sha512":"e2781acbc1bb2a509ed1a6c243c6b47cc93ecfdc731d513fc23433a59d95c7aad73d3edd21bf76fbbde5e2082f118ad975bdeae4197361d1d5b3fb6997957b5c","ssdeep":"","tlshash":"1511eff4fc0d8ebb1fb2495810902510140d1badebb018e298a77e241bf19a0c78f319","first_seen":"2026-03-04T14:31:41.04849Z","last_seen":"2026-03-04T18:12:54.295267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=snd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=snd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJcnCCGzD6089dj1uqOXpUJZEv%2FOa%2F9LGUmHk3cGCyOKY%2B5fgdPBsjoXtYvkCLks0oE9spCgKBu7Y0Uh0jgoVDLwDb3ZaAAq2H7t0Zp8g%2F38fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955928d657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/866748604162446fac7bf4f5aade5a4c.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/866748604162446fac7bf4f5aade5a4c.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7464\r\nConnection: keep-alive\r\nx-oss-request-id: 69A8423376EC4B34332BC12F\r\nAccept-Ranges: bytes\r\nETag: \"B507B824EC62BD90162C900C6C9B71B2\"\r\nLast-Modified: Thu, 22 May 2025 23:38:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10622124671661316951\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=866748604162446fac7bf4f5aade5a4c.png\r\nCache-Control: no-cache\r\nContent-MD5: tQe4JOxivZAWLJAMbJtxsg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"b507b824ec62bd90162c900c6c9b71b2","sha1":"5da7f02f146e9522d4b63961c10bf85724edcb3d","sha256":"6e6e6948c5cb0593396f92f4db89ff1dc1f8d37cc36dc826719eb6016beafac1","sha512":"5c7122f507409af625e9452189135147e879d4eefdc5c7edf6b65e6c2b7f0ee789bbc531e8a0091854058de56669c4be999a12ec95f18e78e316fe2fc753a51c","ssdeep":"192:iaOSHIIHUCD4waPRCT0wbSrXyOxz8N39tajKAO85FE:io50wWRKmDnwB9tWKAOuE","tlshash":"b6f1bfd85cc8064b1807091e28bafec592ae920682fd6c0ccdb7d70d47252b1383479e","first_seen":"2026-03-04T14:31:41.049962Z","last_seen":"2026-03-04T18:12:54.334762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":688,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/bitcoin.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/bitcoin.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233B6DE1D3832EF025F\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-08T09:03:19.658534Z","times_seen":21670,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":816,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-Cj6V_gaX.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-Cj6V_gaX.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69a5286a-363\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGW4ZuoZ9xj7Rl3tSB51m35jTwc%2BvVkLrhzJY9gnG3Unby70uKlLphnmPEczLFKmgXE47rtY7%2FkrV0BXXIfkmyOTNLprZToScPZk0w%3D%3D\"}]}\r\ncf-ray: 9d719553c82657e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":867,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (866)","md5":"868343255e09a24babca2564ac23e37f","sha1":"1b58bb7ee97ba6806b800739df7993ea70ad0505","sha256":"2940bf8bf71e2ea7113042e6f52b229d3e7131248fa2ace702a18eb327a46d7f","sha512":"e2781acbc1bb2a509ed1a6c243c6b47cc93ecfdc731d513fc23433a59d95c7aad73d3edd21bf76fbbde5e2082f118ad975bdeae4197361d1d5b3fb6997957b5c","ssdeep":"","tlshash":"1511eff4fc0d8ebb1fb2495810902510140d1badebb018e298a77e241bf19a0c78f319","first_seen":"2026-03-04T14:31:41.04849Z","last_seen":"2026-03-04T18:12:54.295267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/6f03d6afe9894baabb99be36e7f50917.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/6f03d6afe9894baabb99be36e7f50917.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4181\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233B6DE1D3832F8FE5E\r\nAccept-Ranges: bytes\r\nETag: \"2F973CA6C3BE7A4E92F2ACF4C897D5A2\"\r\nLast-Modified: Tue, 08 Jul 2025 07:28:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14966815269309599016\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=6f03d6afe9894baabb99be36e7f50917.png\r\nCache-Control: no-cache\r\nContent-MD5: L5c8psO+ek6S8qz0yJfVog==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"2f973ca6c3be7a4e92f2acf4c897d5a2","sha1":"1d74d4e6c21fb62c572d11b8cfea0439ecebc75f","sha256":"63cc04fd4478a2d7f2ac2bca21dd21701d01ec22813a1b3c9279900ac3c74d8c","sha512":"9cb756ce54141a69fb8d0d3d581b98737e4d83ea4be7760551029518c9c108973036bed0e4fd8feda2d7c3fa8d1c43e9a44c4b235126baa9eb32b8d2de7b7ab0","ssdeep":"96:Br0UVIJ2bNICImFvCRpF45Uo4cxpkhvkhNDeK+X+:BxnbVCpGP4cxqhgMu","tlshash":"03817ddf3080d966090dbda9573ca7c65d39f4832e80a990cb6dd531d3d496495c4c37","first_seen":"2026-03-04T14:31:41.052734Z","last_seen":"2026-03-10T14:14:14.95562Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":508,"dns":8,"connect":166,"send":0,"wait":169,"receive":0,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/vendor-QXpkpZbS.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:10.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/vendor-QXpkpZbS.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-16c35\"\r\nexpires: Thu, 05 Mar 2026 02:31:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9Rm8irNtXXwIA3I8PRoG4qly2ws58sgUI8CqiiwXU9CUt%2BB8HGH0ZXLVE2CRSCVgLLt8psr%2FTPVfbt%2BIj442zv%2FXt5X%2FCfZCVAwnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719543fda057e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-06-04T04:33:14.445183Z","times_seen":199,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":879,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/platform/666.png","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /platform/666.png HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 May 2025 23:15:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6833a476-5041\"\r\nexpires: Fri, 03 Apr 2026 14:31:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEWLnTJ7xYdsZ8Sn7CNw8xPYCGyfNNyysnNsQMIPRb5shGEBg2IzJ2GWw4QUCllgxhqbdU2SVc4I6xEjuarU4C5RBpiNnGzXmiV1iQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719558a8c357e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5ac74f58b216bf1c90e7cc3810857c54","sha1":"628c3da8d1f790ebc52c23f4b2d23bf0bac717f3","sha256":"b13ddd6ac9fb2ad107dd0b402e52d38cee6cfd74aad914f3721bd7ca54217022","sha512":"2f9864960aa2234fb175db17dff763aa2d74d1483a98cdb0807deb9ecc689baa373a688d69ed46ab1cb4fb4e6b3c6049d26e3cee6a61afde3b2ba4bba7455e90","ssdeep":"384:150wCWio6PMaR2x3sgDawWpiwBSKJr/sLrEnbXE7vgaHwjdj4aEWkYd9SHUG0VRX:XZn6PMTxon8wBSKp/sLAng74aQRcrWS+","tlshash":"7992c0cd1586ca3c9647b2682337dc5cd37345f27c0a2a59b96c4b4886a0822fef5b92","first_seen":"2026-03-04T14:31:41.055255Z","last_seen":"2026-04-06T13:16:59.417584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xpd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZfJtVwsn0f8qcuNBkD3JMMoioZj1K5GrNNqSzfk%2BOOs0QuIJ9kJqIr%2FfxOem6ebcCncLyCJGkoIATrTEe38%2F6PWwRwhmgBLpWpQ1O1MEPRDaJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955908cd57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=gc","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=gc HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YM2Wb2esd33nk%2FPHuWOcVyh8B7GZdLnJRr1xFl1kOCvAHUQG6RDq%2B5%2FZpnEzaTUKY4OfDThBt35YohxLjJ4as7CXGO20L29ZBZWzCLLEdaMfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a290957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ec2e1f9d698e379996dcde521c58e406","sha1":"2a98ef6a7a6455ea5ce4c1f75e9865ab2f159da7","sha256":"a256e039e970c13d510c988fe75638c949cce9713d21af31c1fe9a27469110d6","sha512":"0e1ed080b0f077ac01d7ffeda1fd159b6bbefac0abd4a3d90cae73bb645f9f2c818f27e67f28d275b022f1098bb8f5bb69e4d6c4695e756006c1c3faa91efd7c","ssdeep":"","tlshash":"e89002659d1c8242ec8304a5958a220400643164363493484c59512580c82a62048858","first_seen":"2026-03-04T14:31:41.05711Z","last_seen":"2026-03-04T14:31:41.05711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=si","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=si HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8b3Y%2BpejeVCfumhAPTGF23XjVqlH1TTa29uOaFo5sc0ITZ0%2BgbAXqD40a6ytMD23X9sksxc72IpM9SzoWs7sndbRiWx9E8OqKJDz%2BhCK%2Bmjyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a390b57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a1891ca6f6115dd7b8e3e8fe3f02856","sha1":"b5278f0992d699352005a3b4b582cd20b301932b","sha256":"f23630a477cd01af7c82b965c4919154ecdead03098a899c35ca219d327b7043","sha512":"1d90d20b9315b531cf66530d9487f988cba53c37291af23b0708ac4d9d61234372017aeef38dc61f293e50ebffffca7aea493180a5ac80a2996a3e6307b3d5f2","ssdeep":"","tlshash":"369002959c1c8242a8c310a5950a120400283270267496484c59512590981a22044859","first_seen":"2026-03-04T14:31:41.058606Z","last_seen":"2026-03-04T14:31:41.058606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/6cd34905d0904144ace26f0fb9adb7d9.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/6cd34905d0904144ace26f0fb9adb7d9.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2941\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233B6DE1D32312DFF5E\r\nAccept-Ranges: bytes\r\nETag: \"11A2878CDCD1DB0823A342243244814F\"\r\nLast-Modified: Tue, 08 Jul 2025 09:53:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2420753834784340430\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=6cd34905d0904144ace26f0fb9adb7d9.png\r\nCache-Control: no-cache\r\nContent-MD5: EaKHjNzR2wgjo0IkMkSBTw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"11a2878cdcd1db0823a342243244814f","sha1":"5476ed234c522ec02c0d6ef06e79ce044cd59c3f","sha256":"b4265bff85588143068279501228a609c097d151ad9528922e768a65bb2140cb","sha512":"f02657326d56ac2858719736445824b44d9c2ea299ab77c41f27ba07f7ee6af14c2f2873b4227593502ec817ba6ab5926b61527b938a61d1ec7dea4e6c4a0bbc","ssdeep":"","tlshash":"20516d8d9884085d150e0aba297bdd0b4a27d680439d2e0cdeff834fc630c603cb6b67","first_seen":"2026-03-04T14:31:41.060388Z","last_seen":"2026-06-01T14:31:28.549634Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":516,"dns":0,"connect":175,"send":0,"wait":174,"receive":0,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=rss3","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=rss3 HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0K6%2F0z4BYRtEVlO3nM8Ur%2BF2UlR0eDXlV%2F8mMniDXpgqjsSiOLQZD1qzv4DOHYR1f2B%2FVfWx1hQZplaS1IyaJVLzmSFE6Zp39FFic%2B0c66Uw8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b493e57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"06fd9e6f57737b26b3c04c33fdadacdf","sha1":"8eeb348fda995882b0b37440efcc33f2f635ed9d","sha256":"7744868f6dfd443c92fb9bc5f7686f7220d73d6e17f5d969616869cc462dfbf6","sha512":"adcf109e9120fb697c45e5cc3d3b11c1d969a0850bb3c09a27908fa23acb6b7e3424936e768f01507d32f1fb0e2bfb30245cfeb4f67c84bca0d9982849b8c1d1","ssdeep":"","tlshash":"489002555c1d8242a89300a5998a23040424317026249248dc59912580c81a62048c58","first_seen":"2026-03-04T14:31:41.06191Z","last_seen":"2026-03-04T14:31:41.06191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=ng","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ng HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gz%2B9y%2BHndmWy9RQZbYaBhZFR4Hr8Io4G%2BpUdPo1x9baWNZF8eW35H%2Byr4bx2MvqwzliieoVrtEDZOjQxDClBF0tVafc8COaP4PDymzPFx2OIGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b594157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c33b8f3c4491b0221226516148b13c8","sha1":"bbcac55217d88388b1be925557756c15c9eb5803","sha256":"3be225ba6b10caa648999012450e6ddd1e244604edc070b98112024160a709bb","sha512":"8b9ee6a8aab7ae6e68dba64278357be2dadc6b17fa0c8ff734b50bd8bee02bf27136c37d0a42867b8d3b39fed7faeefdfd8939d3d43de2d382f30be96c401dc5","ssdeep":"","tlshash":"999002555c1d8242a8c300a5950a260408253161662493484c59513580885a22044858","first_seen":"2026-03-04T14:31:41.063595Z","last_seen":"2026-03-04T14:31:41.063595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/48a6224b45694d7d8aa8920b298f714e.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/48a6224b45694d7d8aa8920b298f714e.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1630\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842337540EB3536637C46\r\nAccept-Ranges: bytes\r\nETag: \"1EAEEF833192BA3D70BC29DB91C39147\"\r\nLast-Modified: Tue, 08 Jul 2025 07:25:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14244112252840778259\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=48a6224b45694d7d8aa8920b298f714e.png\r\nCache-Control: no-cache\r\nContent-MD5: Hq7vgzGSuj1wvCnbkcORRw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"1eaeef833192ba3d70bc29db91c39147","sha1":"9bf30eacbd982377e2b7f67f9345963270a8b599","sha256":"3c5465b5df6428ac2120ec149dd4b6adffbf2613201aedb0545019f4d7eb939e","sha512":"43cb189a52f92cc70c81a7b51b442f60372323bc38b29274d14050e29374934970349902a5834ae7c89169d2059f681e1343dec6af8176f0638a562fb532eb36","ssdeep":"","tlshash":"1f31ca40492f05f14a5b1a6857b315079b1d289f5ce9b12618526154cc591bc2da7f53","first_seen":"2026-03-04T14:31:41.065349Z","last_seen":"2026-06-01T14:31:28.513747Z","times_seen":8,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/272236a4e9d142a1b0000225d9c5d627.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/272236a4e9d142a1b0000225d9c5d627.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20292\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233E9011937397D5E28\r\nAccept-Ranges: bytes\r\nETag: \"D8900D33A656553470BA4993615F47FD\"\r\nLast-Modified: Thu, 22 May 2025 23:40:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3488331552681885706\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=272236a4e9d142a1b0000225d9c5d627.png\r\nCache-Control: no-cache\r\nContent-MD5: 2JANM6ZWVTRwukmTYV9H/Q==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":20292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 332 x 370, 8-bit/color RGBA, non-interlaced","md5":"d8900d33a656553470ba4993615f47fd","sha1":"9b6b0aed934955116691430788797b74499a9307","sha256":"e0a124dd04046cbc7c1773f6cf7f0d4ae04f98008b6961c7253f30b74c6d8842","sha512":"b10a97a69d297e2f80ec780f83832a93a03110e09e86051388aa5df7aedd8bd75042265a9c2bd4775f7a03743184dd6c1d9c85ec0da4a4ab8e150fb756d74858","ssdeep":"384:m0wQB7bonmSmHXLJq/ptnUB0wYv4sxkL8DBFT0aX3aGL:mWeJUX4/ptnUB8vtDBFYkHL","tlshash":"8192d164274ce10179874b659c3fcb475b2baf9958ea1f6c4d2d920cb6100f2b4abf87","first_seen":"2026-03-04T14:31:41.067441Z","last_seen":"2026-03-04T18:12:54.309721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":174,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=hg","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=hg HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEs0Wz7p3Au7tJU5BxG8PswNvAadCF%2FwPM8PbeqL53pQsNA4qwkf4rYnrmmJ3IdAOCXqA6OeesTSZr2Ik3KW2Pnlpl%2FY1GN7tSrfBspkw3ue9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a290857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ad70b71eabffffd142bdccd223cd070","sha1":"cb449834749dcccedd888199fcd20c80db14ceb3","sha256":"4f8d5bed80fc6f6b71c7a5678cf93b829bd957f8413da6a01fe776028c25ac64","sha512":"0b3883932eea0d2b9fdcb55523d39efd7853dc179a4e2570334137153a63eb231b98ebf68ca129f239e1df21e4f7d4ee80f78a9d7f072c4168f0a803a20acdbe","ssdeep":"","tlshash":"c79002551c188242e88300a5950a320884243165262492484c59912681881722050868","first_seen":"2026-03-04T14:31:41.070532Z","last_seen":"2026-03-04T14:31:41.070532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=eua","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=eua HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0uRdNDPtEl0v0Mst3N2NfPR2%2BVyEoGPKkDhDuHVBZU2%2FzPCf24tPUwVcOnLI%2B%2B0EUFq4Di%2Bw%2FhPfgS7UxP%2FwvUj%2BL7IoEJ2JhB0hr4uutzgqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b493d57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fb7d67f0919319fc2d38be4c7946f53a","sha1":"1c8fd93ec44de4507c4c8797b8aafad1c10ab000","sha256":"112a8e8dfbf4955c1ca8e84153f0ff99d68e64f2f3bb727a166401fba953f70e","sha512":"7c7c9a958dbde650f2e6bb24f8214b3e9037ba04ebf259822fb14cf15ebc1760524aa8dcf9b6fa043cafd6b32b3069c6ad7c8ab1477bf669f07a339d465c597f","ssdeep":"","tlshash":"ef9002555c1c8282bc8700a9950e1204052431602a24d2494c59912580881e26054858","first_seen":"2026-03-04T14:31:41.073115Z","last_seen":"2026-03-04T14:31:41.073115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=cad","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cad HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2Fs23fVdOE9tyEtCQ6AvfrmVlgk7nBPVyu%2BQYFM7zcdtz5kYyXBfi8%2FRYEo0TnlG3KH80vhIpxaXvrvGQS5tpcADHRnxd1yx9xYiLlsAtofJxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b594457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f615d16203a9f2ec51b9ed701c23aa01","sha1":"23cd2b5b135ef613f86f4f7d886b3a9998c81754","sha256":"4e62ddda15a5e8d7e1ae5db2a73285fe87d09f100777bc9ac8c2cd0fa01c0a95","sha512":"d9f8fcf5c45e30572dc760857bfc5aae00f586baaa1c093317dc53f7c101e63798421aece61bd131204d94a62b0cefb381554882e6d3515821a470a945291b32","ssdeep":"","tlshash":"519002655d5c8242ac8341a5950a121400243160262492488c595125c1881a22444898","first_seen":"2026-03-04T14:31:41.075007Z","last_seen":"2026-03-04T14:31:41.075007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/svg/dark/mengbanzu12.svg?2.0.1772431467216","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1772431467216 HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"65424d1a-306\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJlqRI0F65LM%2B6yNu5%2BTbEMc3R%2F86eP6mxR2wPOF2zGiGrIxbHfzjOrKbZUK%2FvdqGlr2gZdpXVm2PGGoC4YEZsKJ431NFguLjXPtlA%3D%3D\"}]}\r\ncf-ray: 9d71955e499f57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8fdb5cde40e8ebcb2b7fddbe19943e","sha1":"c1560502d0305ec2f9973a5857c7cdd9b56caee7","sha256":"3ab8082b5d02f0e40827f2520fe7d423877d2f8d78c6f41cc11fed84b276a0ee","sha512":"8791e15406186847e2527fae5de31e11f9820322947716a0b54d235607efaae19370d66d1864a78b5f65f84ddb778b46df2474860ae9176d828c6cf958d9aac1","ssdeep":"","tlshash":"4d01f17a5221c15da2434b80c6e93f4092bda29ba2d00448b3a32da54d74f7f55bc996","first_seen":"2025-06-01T04:11:58.700896Z","last_seen":"2026-06-06T04:02:55.292488Z","times_seen":255,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/a0abacad582243949ffb3d6e3ee765fb.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/a0abacad582243949ffb3d6e3ee765fb.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2373\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233B6DE1D32311D015F\r\nAccept-Ranges: bytes\r\nETag: \"BEDEB4328345DAB3EFC16EF5D8E3856C\"\r\nLast-Modified: Tue, 08 Jul 2025 07:28:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14686584944911720841\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=a0abacad582243949ffb3d6e3ee765fb.png\r\nCache-Control: no-cache\r\nContent-MD5: vt60MoNF2rPvwW712OOFbA==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2373,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"bedeb4328345dab3efc16ef5d8e3856c","sha1":"93408dd1b7dc0e9fbc8ae5691dc7f08e4afb74a4","sha256":"9ce29b6eb4405da6f45edc2cc7742354aefec8e6825fc6e3014508fae4aa4c04","sha512":"6c6211dc86c29352c4b23630ef30e1d6423dcfecea23414a378eb224dae00805b4688d1b5f853204d2565cfdca140e3db0a15dff86c56aefb9175e6490735803","ssdeep":"","tlshash":"ff41e85add623a12c2aa8720e5ed601bd8175f82dcf1f2ee9a6be40318202c7958c5d7","first_seen":"2026-03-04T14:31:41.029864Z","last_seen":"2026-06-01T14:31:28.584977Z","times_seen":8,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":677,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/7f8ed556fb8846b1970b849042ef5208.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/7f8ed556fb8846b1970b849042ef5208.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2038\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84234B6DE1D3231D9075F\r\nAccept-Ranges: bytes\r\nETag: \"464F5E8295564D8A3B636B4F9C6F2DFA\"\r\nLast-Modified: Tue, 08 Jul 2025 08:09:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8819679064993545040\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=7f8ed556fb8846b1970b849042ef5208.png\r\nCache-Control: no-cache\r\nContent-MD5: Rk9egpVWTYo7Y2tPnG8t+g==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 60, 8-bit/color RGBA, non-interlaced","md5":"464f5e8295564d8a3b636b4f9c6f2dfa","sha1":"2be0d383106f81ff00dc43a330b0738babad678e","sha256":"4b8ec5c1921a6cdb35a5dfff815aad53116d0ec2e890efd275a610abbaf98047","sha512":"37537a02494f1ae8f06f866a42ce06d6b5d11b5dbff98dda3029e86e963f7267306e953de8bd21fc283d648381609128061b6ede8ea8ced7b7af4791bf4517b9","ssdeep":"","tlshash":"7941da2efd1579c1495ce48225f75416ec724994c4e4e9fbac8b843ac5b01e5d1361cb","first_seen":"2026-03-04T14:31:41.07811Z","last_seen":"2026-06-01T14:31:28.58728Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1345,"timings":{"blocked":1172,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=cad","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cad HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Um3XLvbX5VbYYz5WzjKfwubMoK2QrWzWxXPpK66PxQO7QTouCl1OqeQwdLWdUh4ZyWLbexSBlKUdJPXfWj6kopRCPzDPSWrCtu%2BePVzdncUfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955948e257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/fonts/Arial.ttf","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:11.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://excbybit.com/assets/index-MmqlATds.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\netag: \"65424d18-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXkEoTaw38S5BoG8JDWicfjG8YWbuTzN4%2FUPSHpaEN1%2B2YpFu8Fds%2FaQku63smAamh9vP2%2BT81GpDSZ2sduQlkQekbkfZpjP803nXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71954a0e8f57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-08T05:16:21.720932Z","times_seen":1329,"resource_available":false,"data":null}},"time_used":1635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":1086,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-x9glv9qy.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-x9glv9qy.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-349d\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcHP0kwrO2rKnXWoFAtlBwd5pmh33HxBl1rgyl6w%2B1mblDZ0y06Ye%2FkyxR7tfLeyffJPFgayVVu4hbKs%2FgSS3nYotR4Bj4Ty%2BRxj8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553b82257e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13469,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13468)","md5":"95e0deebd60c830271467c9b1bc06757","sha1":"d324e3516f1884704851ff017c0cafb3e1df4af4","sha256":"fdba0bef08f96305e3486b4ec4a4f30d697a9f958d105ec1c7ef19ad26762fa7","sha512":"8c7475b4a452036ed260066b0e6526a1645389203ec3c50ccb83a0f269b5c1cecec92517ffe162e9e6f6dacb697df04600609bfc844eca06e5a90c92351933ce","ssdeep":"384:dkvwISJvPeoj4ZFV5htfRDjpO5XvSSDnj25FCu2EUpXaAp2dTpuz2zdzMs:d+A8l7ThtfhQdnj25FCu2EUpXaAp2dTJ","tlshash":"3852b649f5069a3df5bba071444c041076197fde900d8ee2b4bd6d8663a3ff8bb4a718","first_seen":"2026-03-04T14:31:41.080893Z","last_seen":"2026-03-04T18:12:54.30443Z","times_seen":2,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/5d4a1d640ba748c08604a4d6ccbf6bec.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/5d4a1d640ba748c08604a4d6ccbf6bec.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2044\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842345EDFF6313725DD1C\r\nAccept-Ranges: bytes\r\nETag: \"9D712859D08E0F74E10A09271EC1D8F3\"\r\nLast-Modified: Tue, 08 Jul 2025 08:09:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9916818611869161154\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=5d4a1d640ba748c08604a4d6ccbf6bec.png\r\nCache-Control: no-cache\r\nContent-MD5: nXEoWdCOD3ThCgknHsHY8w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 60, 8-bit/color RGBA, non-interlaced","md5":"9d712859d08e0f74e10a09271ec1d8f3","sha1":"15beb76e88c758151856f6b0426233a660234799","sha256":"15ef0af6d0aa9dcaabe392fbf77e331507ea362efb25d7d2020899140e4c2d2a","sha512":"c06ce09d6d392edc58edbe56785e5b2109cc14902e439b428f36f2d1abe7b61b20ba7ab274ba27ed6c49efc17df23a1897090fc0b95a699e6a51d4f90b98e897","ssdeep":"","tlshash":"28410893faa658434a15d80a1ef5c1a7c3220482def2d076cddac6232c197fc99184db","first_seen":"2026-03-04T14:31:41.083908Z","last_seen":"2026-06-01T14:31:28.609874Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":963,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/images/banner2.png?2.0.1772431467216","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/images/banner2.png?2.0.1772431467216 HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 23 Jun 2025 20:45:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6859bd02-223ad\"\r\nexpires: Fri, 03 Apr 2026 14:31:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtJphiknAZLiU001UWKGBrleEJLbkegdUNMKnyWAaMaeAi2pe4ZzecaPd%2BzKiv3AoXniWiUvFxoHYAosZeJ3k%2FukYypLU1jPBoj3Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955f39c557e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 689 x 302, 8-bit/color RGBA, non-interlaced","md5":"9a3861ce0f6b27bf7685b73a969f9893","sha1":"4a0336aa8c932bc0d04edc6d9ea8b1703b62482c","sha256":"96eabaf97f5d00eff554a95b6e89812e50c54d5271e199eb4326e42192325e81","sha512":"e939e2c9e8f6a07e6e5c9ef36e89fbfa3c06eb77e8dad0aa64212fd7ccf02881c3f621578e6b64f001166a23c088bf244240382b14e049bfac663fbb39820564","ssdeep":"3072:n/Rkf3AE+i0E7WqSf98xW7ABC/sTqp5BC1NupVdBobGsMnGL6XpG:/yft7WB98wEcgi/C1NupVkGvnGWG","tlshash":"57d313b4632e33501d85d9af035791fce2af441e116fd027fe9e4631e6606e98ef6812","first_seen":"2026-03-04T14:31:41.086016Z","last_seen":"2026-03-04T18:12:54.348637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/509ad7acffcb47cbaa39f96aabbb16b9.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/509ad7acffcb47cbaa39f96aabbb16b9.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2091\r\nConnection: keep-alive\r\nx-oss-request-id: 69A8423476EC4B34330DCB2F\r\nAccept-Ranges: bytes\r\nETag: \"8C1233A4573D4180D8FAE2711A1082E8\"\r\nLast-Modified: Tue, 08 Jul 2025 08:14:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15218326233007876142\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=509ad7acffcb47cbaa39f96aabbb16b9.png\r\nCache-Control: no-cache\r\nContent-MD5: jBIzpFc9QYDY+uJxGhCC6A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"8c1233a4573d4180d8fae2711a1082e8","sha1":"14d18b0ff95a9ad0e1146f34bf5f8a2ab2f5c09a","sha256":"5bd5c2da01dd91d6da37e07ad814766bbe3257bd89c74c47248ef04b7591d671","sha512":"dd2bbcaa662c3ffb9b074902d5c5fd877f93919916f86c78f42f8ba33cb0fd6a2a5030ee56887d2f3d589a534352943505a0c5449c152c5d264b429c7bde7b99","ssdeep":"","tlshash":"ad41e9e24b53f107615af011975b8a8c7a7c9a14278356140ef45c22c71834fcbe629b","first_seen":"2026-03-04T14:31:41.088216Z","last_seen":"2026-03-10T14:14:14.987976Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":1324,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xau","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iom4lR6qZwJ6EwD56Xx0%2BDUdOEWrXXNaR%2BBpqGhkURxGo3x98ItDNm8LfsTi30v9vEbH3x0FSBSdmogHSC9YZAQ4udGIKBpXfauK652pQBxctQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938df57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/currencyItem-CzH_pm7R.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/currencyItem-CzH_pm7R.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-6d6\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3hVlosQPLaRzTzt9AsEWdyUyQep%2BeuO1fwliA4PzHLKWnoBKS03o3UAwMotfNm7Mcf%2FxSWQ2QSRRgIXsDxmwDO%2F578AED9SRhziVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553b81f57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"c6a17f512cc9c95f59973ea2ae4e4416","sha1":"0ad171ea9943b7a6437058c31cb43dc1166fcc76","sha256":"74a8f8774c72cbd1f1fd15a3f9c6047fd9d2ffe541137ce636f97ad9ab1c0d6f","sha512":"cc81f410f177ee367f63dcb019f56f47914fb633ab0a602d5cd08fe1ade9101ab4990c1e89e930202c47b09cc058b38aaadf6e31bc33238971969d5f1edcfd64","ssdeep":"","tlshash":"28315c9463190374f936c4976fa8024d90543fc19047b9c9f8cb6e275dcfa931b709ba","first_seen":"2026-03-04T14:31:41.090112Z","last_seen":"2026-06-01T14:37:24.227535Z","times_seen":10,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-x9glv9qy.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-x9glv9qy.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-349d\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJTksR%2BqGIwfdnNkpu5%2BfhXeC2b6eWmvovLCiLeh9j1TvsaDWWhH6eqYW0XxfsVy4KdsnzvnaI%2BEzb5nnOmkILGRnxOrNCnoAptO4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719557589857e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13469,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13468)","md5":"95e0deebd60c830271467c9b1bc06757","sha1":"d324e3516f1884704851ff017c0cafb3e1df4af4","sha256":"fdba0bef08f96305e3486b4ec4a4f30d697a9f958d105ec1c7ef19ad26762fa7","sha512":"8c7475b4a452036ed260066b0e6526a1645389203ec3c50ccb83a0f269b5c1cecec92517ffe162e9e6f6dacb697df04600609bfc844eca06e5a90c92351933ce","ssdeep":"384:dkvwISJvPeoj4ZFV5htfRDjpO5XvSSDnj25FCu2EUpXaAp2dTpuz2zdzMs:d+A8l7ThtfhQdnj25FCu2EUpXaAp2dTJ","tlshash":"3852b649f5069a3df5bba071444c041076197fde900d8ee2b4bd6d8663a3ff8bb4a718","first_seen":"2026-03-04T14:31:41.080893Z","last_seen":"2026-03-04T18:12:54.30443Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xag","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxoX%2FjZ8dXQUXDi8cBKy7GZLI1zf4l5Si59UziHVUDrxAgdsB9Rgs4xEY%2FsfcWV0p9Lu5sF9gV%2FpFNvXytxmLde2BpMQoOk8F7xn%2Bp6%2FEvIaYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a290a57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"709981c1307a23bee2558fde17c473e1","sha1":"5c3f61fed7d69d934a0b70ea55c071040a079bf4","sha256":"7ac4dac9de0458053c4c7cce4930b47955034b9b9d16ebbca07d8f45be59b281","sha512":"6558c5d0024b19f64928bb4b4e0c2fb17cb915fdeb50bab13ddbd5ca624310f275746b38c32a05aa7bee241e38718ee005d01db098da3e6ed866eba2c89b7401","ssdeep":"","tlshash":"de9002555c1c8253a88300b9d50a120510243160262492488c5a5325c0881a2205889c","first_seen":"2026-03-04T14:31:41.092077Z","last_seen":"2026-03-04T14:31:41.092077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=snd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=snd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTd3DwJs7IPJOVNrfa7sLxZlD0Na8CcsLv%2BZPNYnHf3YpPVNIDgAv6y%2FC73ObLDXdEg3iHUnGPSWKOx1%2FYf0hm87PYmon2zrEl9Y6zeT%2BHj1xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b393957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69e141bca5a823e694385877c17f641b","sha1":"cf9f4e87914ffc2bc077a6028faeea464cd0d362","sha256":"a8a34852dd7dd6dda4107b4f302f51755cd218642fec33a0edf58119fe5f6e87","sha512":"f14545a2f8acde040f416a453ed49123ad2c225158c25a60423814975bca640dfd3548390c7d7d71e16b9dd383832419a82a2ea81ecca7ba5be999359780dece","ssdeep":"","tlshash":"4c9002955c1c8662e89300a5951a1204006631603724d2494c5a922590881a62044c58","first_seen":"2026-03-04T14:31:41.094109Z","last_seen":"2026-03-04T14:31:41.094109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=nid","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=nid HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDROktBDUxVrU3F%2F33fb0DnkdvE1JlyvuCy9Wn%2Brl%2BHX8wdUCdZkrK10y%2BYdPV13TYD%2B5kccudazPjaR7lC4ASfK4o6%2B%2BkSEeQ%2FLGfD6pUusaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955928d457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=oil","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=oil HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yASW3T%2BD0AmmjDyAy4zOYeCWcU7W6t9caEJNl5coaGr4BWcu9HEjhl6O1F5GPh6Xv9xxu8vwjCyUkb4cnQ56FIoGgowmcEOIhSHB0cwAPDxEwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b393657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7cd1bbfa75ec7c8b9d84cf5f92391de8","sha1":"ce787c421f5779fd91bd1278dbcb76e2180bdc13","sha256":"8abe395aba5f148a658dd2ff9bc0b103b7ac192acd6c253cb913bf9b3345f353","sha512":"07319fc1a5e9ae7fb6a3b0ecd449ac07a9d011a61d26c5e854e92fec2775eb9f2310348372e9d8563bc9aa16346f7e666a0b980c7cd44374885b13ab38585487","ssdeep":"","tlshash":"469002555c1c8682b88301a5a50a120410243160366492485c59912590981a62044868","first_seen":"2026-03-04T14:31:41.095991Z","last_seen":"2026-03-04T14:31:41.095991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/acc73639ac77445389c63f6745bf4201.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/acc73639ac77445389c63f6745bf4201.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4433\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233B6DE1D3832DB005F\r\nAccept-Ranges: bytes\r\nETag: \"F8A027114FC6BB76676D540400E32776\"\r\nLast-Modified: Tue, 08 Jul 2025 09:49:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2329559583201743324\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=acc73639ac77445389c63f6745bf4201.png\r\nCache-Control: no-cache\r\nContent-MD5: +KAnEU/Gu3ZnbVQEAOMndg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"f8a027114fc6bb76676d540400e32776","sha1":"7451b5138b5a6843b1f7fa88b8f2a5d946845de5","sha256":"898204339c653b0720d292a5c66c3cc746ab0499ad80094b683b98c446b49c22","sha512":"1fe59501d55a4e5461981ee7fb37a5e84a2948926d6ecd93a7d203ccb11bf68818224db77f3fca9c181a64d5b514076c0670821d12f7659f724349fe92e48953","ssdeep":"96:RSMllcHitlIxv9vk7C1+I4wWHLihk/x71IMOxZnaDSQgbMbC69:RSHIIHUCD4wax1Itng/gbMbC69","tlshash":"37917ece7900084b0559099e312bed4b8b63d7e5a3df8f2dafe9814fc6308222d72653","first_seen":"2026-03-04T14:31:41.097905Z","last_seen":"2026-03-04T18:12:54.369031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":665,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/ethereum.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/ethereum.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842337540EB3536ED7E46\r\nAccept-Ranges: bytes\r\nETag: \"12D9722461759CEFFF02D9076A3D2718\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nContent-MD5: EtlyJGF1nO//AtkHaj0nGA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-08T05:16:21.618678Z","times_seen":600,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":813,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getCoinList","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"104.21.69.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOI7eQhEzgvACrJ%2Fq8%2FF3a9fSxryjyHeKzGP9AONDpphS14rSp4ou4o3i%2BCD5oO1E4Kgw0H19Q7yMFbP4Nz77FiEifcQ0yoJ83LMDqphpI64HQ%3D%3D\"}]}\r\ncf-ray: 9d719553dc0fea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":66,"dns":2,"connect":12,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getAllSetting","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"104.21.69.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=602Xp0tP83dbnrE4k9GpQ3Ms8UZpO9IXzTpXd4SbkFhr2vwU0iOsUyUycdbATubjw4UIwcGkFw3OXhmmIKY6SkDKDGoa%2Ba7IGcBxS5A552FXWQ%3D%3D\"}]}\r\ncf-ray: 9d719553dc01ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":63,"dns":5,"connect":8,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-x0ks2Vyq.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-x0ks2Vyq.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-1242\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuLZem1bn2xq6xDmqE%2F9LyFIs5sSjYrqaJT9UqosCxt%2FApCN5C6PaICIXtmjUCfvW%2FNwtQ5Jxl%2BubhHL0dtxQ4D1vC4CvExbVn564Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553c82457e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4674,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4667)","md5":"479c3f70b685e221a7065de58f88ef73","sha1":"4c45458f6f75c012c4058aaa3f29a3c941e558b2","sha256":"18b1ddf86562514fa44970ca23a87b04a088aeb63948fc39513563ec0d62daf9","sha512":"93c7fc43588d796f4e600bb3d85d25dd59b7f57f04061d89f630adb24940c42c076d48b191d8df79cc4c07b3c6f2151b5c844d0a78fbcb3e25ae1de87bf0fe05","ssdeep":"96:PtQpM+UwfNvYEbqCwrP9XjuxtPYftIwe6D0K9wjUncF3hr1r3DQVj7uG7PhXTHjT:SG+UwftYwqCwrRj2SftIwzreQncthrJa","tlshash":"b9a1959cb806ce7daabb884044981411655c3ffba11c48e6f7fdac46a3b9ab9d341721","first_seen":"2026-03-04T14:31:41.100984Z","last_seen":"2026-03-04T18:12:54.308901Z","times_seen":2,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=fef","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=fef HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjEOPVnGoH9ZV8KeZSpxn42bRgC7bJbbNmhXW2vezMobRNA1qOTOuQ3bvLN3x8rqUs7BjzUSZ2j0G0cr4ziJxtSyzz4DthwoNQSnmoCI8SY7fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a491257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"359d562eab05122d7c82e8baead109e2","sha1":"4b9f9e4c22fc5765a66bc873f49a1f05c8125808","sha256":"be4ebdaf7fd51ea479518fe544b0e0f7019fb6a01e7c8be286765610d08c7783","sha512":"ce744ab73f5ad4728e52f3f6b59268e8987fca77fe815427620079e3e5d0abf22c93b207b2aa9da743e0ebc5b18c452808efa6a7804a625b6a201e2ca582ee7e","ssdeep":"","tlshash":"1e9002655c188242a98300a595062224002431602624d2484ca95125c6882a62051858","first_seen":"2026-03-04T14:31:41.103018Z","last_seen":"2026-03-04T14:31:41.103018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/tron.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/tron.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 69A8423376EC4B343380C32F\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 17\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.285468Z","times_seen":581,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":835,"dns":0,"connect":0,"send":0,"wait":187,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbtjKXivnQA00Jc2yE9xEJiYkWeswdUjPnSx56LBnN85LjbbgwS20yWPFJRxzqbsW463kxy4cCX8DyTmiX6EjrRhHLPN%2FTDhVV3WIGiIcScbdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7195619a0657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-Bm11JTmW.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:10.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-Bm11JTmW.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-17ccb\"\r\nexpires: Thu, 05 Mar 2026 02:31:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYt0OnNNmde1OEJcsppPGsnpBlQIhxHuxli9BBUzlMmJzq1XVnFTekj3P2700YMrTGUOSknlYeATex9uigX1XkobLZKpDEI%2FbEDqng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719543fd9e57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97483,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60448)","md5":"925b53c1cb2b1b17a2c26913d3cd3cb6","sha1":"2aae46a582a07c611fae6a70aad9e6673f88006e","sha256":"8904f0482ce9209397ef77789c45ef6e276c290dd8743247b25a25a2760dcbd8","sha512":"3d3ad8c71e685d5eda29345b830dd09dc7a3a7f1dde15f21493d9c65297fe2fa37923a4e27d12dd6898342f2a242251fab39811d6e3c6f271ccca07b4067e323","ssdeep":"768:Oh6PBPahQVAIEmJVIKNrrbCkIcMapRoScAwgo2/FWEOzNJhCjegc5O4yHcOczF9Z:Oano6IKkjOGS9+2dWEOzNt8yRu0oxwL","tlshash":"98934c89944e0dff99fd04986a5b490021781fd78948cc63b36ead1b3bf9cd4a35a728","first_seen":"2026-03-04T14:31:41.106Z","last_seen":"2026-03-04T18:12:54.377392Z","times_seen":2,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/9d89f328067d4fdb95494b66d70b594c.jpg","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/9d89f328067d4fdb95494b66d70b594c.jpg HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20748\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233E9011937395D5A28\r\nAccept-Ranges: bytes\r\nETag: \"9603123647F6260E5B1BBD2A5CCE14D7\"\r\nLast-Modified: Tue, 03 Mar 2026 22:32:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2286027255841781039\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=9d89f328067d4fdb95494b66d70b594c.jpg\r\nCache-Control: no-cache\r\nContent-MD5: lgMSNkf2Jg5bG70qXM4U1w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":20748,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 889x500, components 3","md5":"9603123647f6260e5b1bbd2a5cce14d7","sha1":"b7414c4a9256014c32569e3dbf105b05f36e6a81","sha256":"e01ff3d28880d222869a7108c98710513f99fde113c62e606572de27d15925e0","sha512":"19c75f0aaeaf07e892cba1171c3280d0194f1cea8246ca1dcab61ebda9377dc1697dca28f9538f14fc4566ca0be01593773d42d0a9b354d89c593ca5375a4792","ssdeep":"384:6/lcTtRdgbwA9UDrOr1YeS+6azfwzvcvrVmdTqwaD1xOPXF6Ga6EB/qcaaYp:9PgUO2rOr1YeLs15sxQa6EBScz0","tlshash":"4892dfda1ae06035eb4ea937445e8a375b3269d5c7604fcba3c5a6d20dc1c6cfde22c0","first_seen":"2026-03-04T14:31:41.108079Z","last_seen":"2026-03-09T15:24:29.927118Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":526,"dns":35,"connect":164,"send":0,"wait":175,"receive":3,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/vendor-agZX8Tnr.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/vendor-agZX8Tnr.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-f29cd\"\r\nexpires: Thu, 05 Mar 2026 02:31:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiV96k6kgX1zvb7%2Btffkv7vTqGknbhzQcZBy4PxrjfvyVw8iqy2eWoUpo5qseOb4vi83lFuyu57nUHWo8NImKSXycQV5H3b2gqcnGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7195531ff957e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":993741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"66260ea087474459eb2fa68de9f90624","sha1":"73ca2caab40def75fd3fe65d2d96a3902a7dd9de","sha256":"2d5eefab935086fc18a64af61b3afbdfd7279e3bc315c4486a39227b266be219","sha512":"efbb467f9ddd586c3232559f90c55325d689421f0bdb4887b276590761bd60069db532ad258230bc024e275dc535fd7ad7a4dbd0f0d0e2624e8390f9e61536dd","ssdeep":"24576:u001WD30U2Myh9CsM2HheN52CWGcUqw4P7:u001C30U2Myh9CMgN52CWGcu+7","tlshash":"492538c97292f06147ab24e240bb1007f3396e59740e84a8f169d8eb7d79d89d277f38","first_seen":"2026-03-04T14:31:41.009321Z","last_seen":"2026-04-06T13:16:59.304417Z","times_seen":8,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=nid","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=nid HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaaibFBvVTM7HvlHAs9BtD3atOItB%2FMGmDsDbMqABhgM8pZzpEVUwv0DMYo%2Fp%2B9ioLlPphlBR8sILOaLcRo%2BkWs6Jkg65tN3DNWeNIgd%2F7c7BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a691857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"15d4ab1950635d5eef0955d0f637e196","sha1":"566e44932f2919cfd2e973ed7568e11d9f66a14e","sha256":"62aaa65903b6b2070d7a2859bbf8994e8cc824bac45787a8dc1f4477da0e6bfb","sha512":"2620afeb09fc5752e9df32aa1492ce34b86aba8be8f0c1f6501036fa2f16771cbbe79faba96cc9ef6d615fde8dc2af46776f59658ed722563e3d41fe7ff4cb52","ssdeep":"","tlshash":"249002559c1c8652a88300a5951a1204006531603624d2494c5a912590881a63044c98","first_seen":"2026-03-04T14:31:41.110226Z","last_seen":"2026-03-04T14:31:41.110226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/resource/fonts/DINOT-Medium.otf","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://excbybit.com/assets/index-MmqlATds.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\netag: \"65424d18-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=962T2mVzbyMIc7CvLZL5la50jabq6PTM7GZLdaOubCi5hIrpie%2BethUPSCYBCM9vIl3y%2BWLAzBMwKu0wjPAuN9rTa0sqhOM0HnCaXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955f09bd57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-08T05:16:21.696807Z","times_seen":961,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-DGTQxu5R.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-DGTQxu5R.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69a5286a-1ff\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6akqyj5OupUggsEgMKN1x8ST5f9BWg9AeXjoEXccsHVrA36xjA1SZrrkYVSdIwVTFXCuooTDGNxYaN3CuH1IcMWxpa2z9bLX2xbAjg%3D%3D\"}]}\r\ncf-ray: 9d719553b82157e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (510)","md5":"176d6515414a1e5fa4a87bb80419e163","sha1":"c2f2ecf45601664a8983d1327f3d5a3c20bdf863","sha256":"e6ff3718663bcff523111fa44ac38434d2bea4443dc9c4318e823c32a0042335","sha512":"4cd8c51b42d76d43c4dfe02acb85f2ff3f1c909caabcac994cd93d55675fe497b45b85c9aadfebe45b72096521fa922003595b417c63ec3e1f2a522ecea705f0","ssdeep":"","tlshash":"7cf0051fbd79c4720bb3449ce0631c14b62c1b1927d4c5f4d5870724da789f9d61e114","first_seen":"2026-03-04T14:31:41.041986Z","last_seen":"2026-03-04T18:12:54.301219Z","times_seen":2,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-x0ks2Vyq.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-x0ks2Vyq.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-1242\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8Lel%2BRyBVOlhZ7ViajFcSV2JAaX3AQjBDQ%2B%2BqqOAtXV617hz5JaNXi3M1HNAgNqiYYU%2B5Mv1vN3NUUc9hNa9AsUkn8gTLcIz7Z2PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719557789d57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4674,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4667)","md5":"479c3f70b685e221a7065de58f88ef73","sha1":"4c45458f6f75c012c4058aaa3f29a3c941e558b2","sha256":"18b1ddf86562514fa44970ca23a87b04a088aeb63948fc39513563ec0d62daf9","sha512":"93c7fc43588d796f4e600bb3d85d25dd59b7f57f04061d89f630adb24940c42c076d48b191d8df79cc4c07b3c6f2151b5c844d0a78fbcb3e25ae1de87bf0fe05","ssdeep":"96:PtQpM+UwfNvYEbqCwrP9XjuxtPYftIwe6D0K9wjUncF3hr1r3DQVj7uG7PhXTHjT:SG+UwftYwqCwrRj2SftIwzreQncthrJa","tlshash":"b9a1959cb806ce7daabb884044981411655c3ffba11c48e6f7fdac46a3b9ab9d341721","first_seen":"2026-03-04T14:31:41.100984Z","last_seen":"2026-03-04T18:12:54.308901Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=zsd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=zsd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Jp6ilPQyBPJXJ4uhEe%2BuQgjj5rhrKdqWSbjYxkmzlbiBcgR0lYb%2BdS7c7u06Dq2RDtUMsM8T7z8Z4pZ447bRvcu%2BjuSOXNm4p9CPcT%2BwpKhow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b393557e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"be61628ef39e39497b5b44c3fe107948","sha1":"a7aa2008be21a99043c3eddc5ffc85e67e2cc02c","sha256":"aa8dac4f542d2ccf64a54c53e235f9681a9bc91f75e23e9ec7d2b2af748ce16d","sha512":"ea89c0feed02d76d8e30561f641676dc9dc59f1cd84a3e5e8319a52b6fef283e7994089800f27abc9cc7cc9f61d2ae54e049879abeb0f92fe73f984473114f0e","ssdeep":"","tlshash":"da90025a5c1c9282acc300a9950a120800243160262492484c59922690882a26048859","first_seen":"2026-03-04T14:31:41.112645Z","last_seen":"2026-03-04T14:31:41.112645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/dogeusdt.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/dogeusdt.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 409462\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84234B6DE1D383228055F\r\nAccept-Ranges: bytes\r\nETag: \"5E62662F5FA94FA72D280B9615899D39\"\r\nLast-Modified: Mon, 12 May 2025 11:06:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14637744051950836889\r\nx-oss-storage-class: Standard\r\nContent-MD5: XmJmL1+pT6ctKAuWFYmdOQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":409462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"5e62662f5fa94fa72d280b9615899d39","sha1":"6c09cd4863ba09099f286088351601de20a0c8a2","sha256":"c6c149fa62ea01ef272b614d7ea5903589b0f9b68e94d692c2c0b5dde2a2e8eb","sha512":"832192eb3405e689ae5c33ff5304b4acfc5997a3429c7eb865b862fd618984b75c70f6d96772302278e8660ba6de252a9ac6ac1572c0f79cbd05ebf0cec7c792","ssdeep":"12288:o3+lWMo6z6OhZI5kY8sQA6EEYKU783t3mVoq:Fvbc5kpLoEqZ","tlshash":"889423e5fbd87006c24ad9d28b9768adafd39357023ec5a1227ed5b1380e94018c77e3","first_seen":"2026-03-04T14:31:41.114459Z","last_seen":"2026-06-01T14:31:28.586019Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1648,"timings":{"blocked":973,"dns":0,"connect":0,"send":0,"wait":177,"receive":498,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7acm9sCUH3Lj0LnZtdovhSLXwklsdAcg5UWb9LOFiHjGx8aOu4q6iHOmoNMbA78kJmjXZIvJNjFQDTW1XdkmeMMbwVabuZalJloySj%2FwawrrmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71956059e657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"794ea55a58d4da056097e84282002b4a","sha1":"b437062b56283f4913d4e73c99b6e3c0a7b522fe","sha256":"7222e6c2639736fc074c987147d526007336979342ac9422ee2f7380eecf5d0e","sha512":"4d76f91ffbd788a95fb68eba177d10acd152cc9273a86c805fe90c733622a55181343b564439327fdd18a5b743dafa83fe0e6bb0b74592e3b0978bdc655705fd","ssdeep":"","tlshash":"5ef09e1d143cce760d0688c311c87cc8925f0693d660cd30859fcf5c81f467a0b0b904","first_seen":"2026-03-04T14:31:41.00549Z","last_seen":"2026-03-04T18:12:54.356773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"qtapi.excbybit.com/ws/a42bf755-10ec-454e-943c-d10f44a30bf6","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"104.21.69.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /ws/a42bf755-10ec-454e-943c-d10f44a30bf6 HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://excbybit.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sHxtxH6eQTXQZUtDVnMR6Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Wed, 04 Mar 2026 14:31:13 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://excbybit.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: n0JFQ6vs/IUgsvrDlRGGDcjNqOI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=21kCKym4BCQnBr%2BGFagR%2BQKkUQkP7qpD7CIP4FqsVthEJEvC%2BHL4qlFGJbXAJGkNGMJTEXDVbqbDqxNliQtwkTFajNHN0E%2FaXmR12kCsEKST6QEB9%2FUFEKid7BECD3tTG7C53G4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d7195545fd3a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=8141\u0026min_rtt=7644\u0026rtt_var=2594\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2349\u0026recv_bytes=1195\u0026delivery_rate=378562\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=a87e0dc134d944e3\u0026ts=599\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":0,"dns":72,"connect":79,"send":0,"wait":560,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=fef","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=fef HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88PBl8VoPFnenOXkHyTU4XFBrg1ARa1%2BCuqIWMcBGGrD9VRFjuCv6ARHM3dMR7MC3WiTIBzD%2F2wo1G68y1EH1NQPiZKOYSebfN60YuY0NZL7IQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955918d157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=eua","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=eua HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Jgzzv%2F56wsPAlogPh6xjo0lydZ5n%2F2JvVj%2FfMxf2J4XGhR7xUeuxmFOWjuhbcOoxdb7UmzCd2KrQSaFHLZ7QVyU5mtCDxCslIY8o2fpsqQJuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955938dd57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:15 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTCYvbJZvfXXtEOc4nchxRnvvg1QMNmrvTfuoeKR425OiGM4v9ZJaLKNsmEqy%2B6esSloNuUiOHdekA%2FnZW1Ihfi1TEY%2BLxFK15vb7Bo0CZ6IbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955f29c157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T14:31:09.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:31:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUs3Dabn3Njy1rXxT5l3iLxEtSHVINjDrotruAE2nx%2FsVjrfpLNffWqPHR7lG%2BYuolIHs3fxTIIbyH1GFvdqr6jmTRNWUmmySzCxlA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d71953f2c3b4435-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5340,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1098), with CRLF, CR, LF line terminators","md5":"130cd78cc60359823f0ae24e5eb23604","sha1":"5896c24151d70e7f041a68a3a7164d45662c6a28","sha256":"fa41588c432608596bd3daf798c356b430346e73eb331863cd64bda6e9446145","sha512":"a485d6de4e79b3d1b758f9f596125ff2a39c7dbbec874dfe01f4c32c18acba6e1d0d3580ac0d26a68e9b6cc6f4a8c1a270a1b464750c5fb0f85bb34b20fb0edf","ssdeep":"96:+r82Nwf53uSPELRAet/GLzZTCZydHRH/gF2mUsGKhiJwGmuB1niHEiHzH/2:+Fq9PEb5ZCxf02nfambmuB1nikiTf2","tlshash":"5fb130b758a4881a2371162a9fd7f01cdf611293c6195910b0dd80fe8fe6fe5c4c7b66","first_seen":"2026-03-04T14:31:41.116397Z","last_seen":"2026-03-04T18:12:54.287258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":37,"dns":6,"connect":8,"send":0,"wait":570,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-BesoxSLb.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-BesoxSLb.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69a5286a-3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2Flou8KjkjNmbNymBi035PmQLYYFLYQ0L84DvQYwFI1MRSAVLgfTj4XYqqQq2vd%2B3K1LpcEpMCCaYsXyaRkfxcRAqOD5c9KMz5L5rw%3D%3D\"}]}\r\ncf-ray: 9d719553a81557e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dfd66313f61edcce0438f43e57aa8c27","sha1":"b7f84abcd244e02e8315f3b5c5a89bc95faf0b55","sha256":"8939e9e5003c67ca8a9247bae06eb29bb878c4e93b7e50c64282297784bf6fb2","sha512":"62ccd8f0fad7888c7a7683961659d34dfb4155155e285758f3a001a3d703d0610d3114f244508fd9ce2eb0f2ba7964486748b99c07f3d7c14b6925de153e9465","ssdeep":"","tlshash":"0ca0023e56552404b2264311ff4af98dce387a139a96822497022d9139cbe0e356850a","first_seen":"2026-03-04T14:31:41.118031Z","last_seen":"2026-06-01T14:37:24.232083Z","times_seen":10,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/filters-yahvghqB.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/filters-yahvghqB.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-c06\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYeYp98331Z06Jlu6VyFDy%2Bm2xZbKhdqdrnupxA2jHWahlKqtJo8IhsAlnPvnFWoUH%2FAhxJewBBus%2FfHMNtN24buPCpuYzbkh2NVDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553c82557e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"1963a913e15f6578960368c5fa0edf64","sha1":"d880451c9a5a636d904d09f47122ea651145c25f","sha256":"3da06d09cef5f41e51e261c950412ec5ba2041980d4b8e0e4f81005cb6ca7eb3","sha512":"c08b3559068a875f7ac92f464c8b5461e45fdb2dbad5ca6eb868a8f2a8f34d014eb21d17a8678c784502221c7993ef265cb2602929439499033ecdd7c8237ce7","ssdeep":"","tlshash":"1f5124fdfcd3a13356e96dfd44288514728ebe20686e0a4de55bd0455933888d07f768","first_seen":"2026-03-04T14:31:41.028524Z","last_seen":"2026-03-04T18:12:54.339954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/currencyItem-BbYfGcxe.js","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/currencyItem-BbYfGcxe.js HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-4bb\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIkuF4NKugEX8hwFMKKm7cbKR5R3YL%2F7qOqadIuiE7qLWTX07wyIr4KkVtsAUG9gY75mb9T7bv%2FFyaoVbNAC1i7z8N6UpKMMzXbQJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719557889f57e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"98604661ca8ab3a3f4b16c7f5830b6c5","sha1":"aeb64ebf6cd34b1efc80c82b838fc7e4c0239562","sha256":"551bbaab6edf34703eb3533972aa1c477b28a7b3a0395c460fdec8c093e00c09","sha512":"2f19f53be34b9429f8bd43cb74eca136988318007e13c6f9e24c3d625c63976e3b27df2ca55a6030b428af1e686f426036d0515421e127780f19837916505673","ssdeep":"","tlshash":"2221df89a901cbb1cbbe9162c5bd4804160d7fdab00185c1fbed148a37866fcd724a31","first_seen":"2026-03-04T14:31:40.998258Z","last_seen":"2026-03-04T18:12:54.383655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xag","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2F8jq%2BbcYgi3%2FiIFEosZg4SFfGlqy5oYg7qZnXkXJu%2BmuXaADUs25WbU6a4G4ZWMQ4rTQ1%2FFrJMnNEMnOwHLwapK65AwTiid%2FTmf6oGMO3VZdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d719558e8ca57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/af614536f84f40fa93045a3bc9849f60.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/af614536f84f40fa93045a3bc9849f60.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2167\r\nConnection: keep-alive\r\nx-oss-request-id: 69A8423476EC4B343363C82F\r\nAccept-Ranges: bytes\r\nETag: \"49742386ECFCBFB9B06191A5BE9200A8\"\r\nLast-Modified: Tue, 08 Jul 2025 08:13:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10358960434770493650\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=af614536f84f40fa93045a3bc9849f60.png\r\nCache-Control: no-cache\r\nContent-MD5: SXQjhuz8v7mwYZGlvpIAqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 47, 8-bit/color RGBA, non-interlaced","md5":"49742386ecfcbfb9b06191a5be9200a8","sha1":"3ddbabe79f2a0a176b788d5fca919d649f42fede","sha256":"9b5753090a1820fdd65bbf1ccd50fbf112a45b6470f9a1717d68969573e4bda0","sha512":"a07099270363f8c8a82afc9d6275d4c8c02b6a6bc052790bb744eb843a4cc9dbc5fd0d0919052ab70b6b468ad8b9e2f7c0b89c0d884ceb022ba7d4748b952446","ssdeep":"","tlshash":"01411c3255b2d246bbed1c1449b8798b4cf7f334b8c69346ba165f213d2622064e5417","first_seen":"2026-03-04T14:31:41.119839Z","last_seen":"2026-06-01T14:31:28.65952Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1321,"timings":{"blocked":1153,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getAllSetting","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"104.21.69.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBw2hIyzeAtnJZUnOcnzDRTlnZYIZouxXSFxqrcFN6fD3xCIsiCtr0txU43S9uFOVm2ShCmfPF9dU%2BmYw5ZQeerYj8yxilA%2BYjNpby2ZkTxFug%3D%3D\"}]}\r\ncf-ray: 9d7195576bc8ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16300,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3074d2262165b54d963beec12acdfa21","sha1":"733f6977eaee1a43da8cc36c4d6e2906a8c66274","sha256":"849ffa67c1fe211935e75dcd41d7c0ec1eec1b40843ee179c4ba9d3085e97d25","sha512":"dd613e5f44e3ea69cf53c0406258ae8b9eccb65c15d7fa1e2a96da31a989bd3135a136817af6b4a93177b8226cd366c677696abde3adc6a3fce8252a06175101","ssdeep":"192:Nmh/HGLdqdo1bBfOSpB4sQS+O+Xc2CSDf9XxNNTJTqvS0HzX2s03soFMNEobKoZI:mJTTMr2DhM6OY4YT","tlshash":"5e72545936a8dcb9a3c739ce25db77852b5c3863ca48a846947eff1cc4c59b64c8b04c","first_seen":"2026-03-04T14:31:41.013225Z","last_seen":"2026-03-04T18:12:54.311742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-C7beCpuf.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-C7beCpuf.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-2aa1\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkZttvswt%2FNQXqiiMECdCZ7%2BZzoXJH%2FFI%2FYgeG702h9CQv%2FzoM28S0I4oSdJqQBx9KsDTe6z1anw583qNkv3L2bSVPbU5kA9%2F%2BFS9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553b82057e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10912)","md5":"660237aaf79ef3f5abb82e9dce19f512","sha1":"686e801d7af66e89004ce096afda7b844f2a0071","sha256":"5d8d42d7b5f50de61c683f173501b249d7f7aa279cb1a18fffbcc35bffacc50f","sha512":"f01913dbf8b06a0a3245282c59840176d1a5b15ba453ae3122969402705914122c408d0353fda5228498fd6b58835b3867bc989331b398005e26b31afba82e00","ssdeep":"96:ojXMp5mXUVM2tLREy6GGR+M4Ez9qGB23WQ7jXU/8Xowy62rbhvbd4DdNoLnWrVEr:oEYAFfMB2jnXbGBd2dNoLWrVW","tlshash":"bb32262df7a82238ac37d1aa6ec44ecce21dba01e693dda4e51bd5621dd76f3193004d","first_seen":"2026-03-04T14:31:41.121355Z","last_seen":"2026-03-04T18:12:54.30794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xpt","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpt HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXRjhyNgVfcSBCzZTXXGDYOsheVhUdOoMz5z6W%2BLwhnq7quehAp4SSn%2FOcyHZPTmV7zz2cFy7SUbzcJM8z33GTCuLrx2YrZXzGg5b5d1886zjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955908cf57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=pbd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=pbd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qNG4gKXz1sQrRQQ%2BemQ0zZ6vGLvhu9Si6bcF6cvJr74RNODFH02H4yMVB4SWy0LWiyzAbNVSj0pF6Feg0Mor5jDEqCkqQd1yzCoyr9%2Fl%2FT0cIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d71955928d357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=ahd","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ahd HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BmGBZUrEh3RruiuHqNdxFgoKOp6d%2Bz0%2F65Nj52uAjFEJEbwXCu%2Ff7MFxFZyijfeCtsKpruxB0F3K%2BYf%2FGbmCuFYHRVdiqzDEuIc8Zhr0Q0NiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a591457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"949c32c321023fa1c28e26b890a013af","sha1":"e41b9a621240b1656a913573d51130d217908579","sha256":"c1e3405d7dc1d0cebb8233d16ea6d5d90e123b19c302c9e4f700287dd50bad6f","sha512":"fdb5c4cb31b6ae0ec2697b68c7c1da9fb5f6eccd23e83df88068ff803da0001c72e921b3b4e2b4c005d0146bc446618c7b1178bfb62748b2ea4b6db58fdd6ffd","ssdeep":"","tlshash":"b89002566c1c8242a88301a5a50a230544243160267492484c59522580d81e22044898","first_seen":"2026-03-04T14:31:41.122879Z","last_seen":"2026-03-04T14:31:41.122879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=fcpo","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=fcpo HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3CVNCZlhnLc3jvSoifSqI%2BTpbuJNfhSIIT3vBQLg5KWzOO6OPWBBP65W6ovFNUQQfcboXxHf6j1qMQp0OSwri7FsbmnPtczh3AWr7%2FL6Suc4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955b494057e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"75645839e1a29ed31213d0fb7a72a95e","sha1":"60414b14305984f4e09912ab9d08f823ddc89d40","sha256":"4adeb6efeec6bc908aea1d79d1e5b89c953f95ae0544b75cf0519d228aba3861","sha512":"bf7bb03fdc70bd6f4b910df703e397b286c4dedd80d7dc3fcd40c628ad52d0f6b78332c6801d9e55e234eaca7ddf07789c3b52428e818e805d6282267e4916c4","ssdeep":"","tlshash":"0d9002551c288242a88340a99506130440343365262492485c59912581881b22050858","first_seen":"2026-03-04T14:31:41.124234Z","last_seen":"2026-03-04T14:31:41.124234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/44b6231377ba453fa5c4b6f5029df74d.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/44b6231377ba453fa5c4b6f5029df74d.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2171\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842337540EB3536177A46\r\nAccept-Ranges: bytes\r\nETag: \"4B5D859F0A9CE9E901865F9DE6527545\"\r\nLast-Modified: Tue, 08 Jul 2025 07:24:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5845025872106774913\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=44b6231377ba453fa5c4b6f5029df74d.png\r\nCache-Control: no-cache\r\nContent-MD5: S12Fnwqc6ekBhl+d5lJ1RQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"4b5d859f0a9ce9e901865f9de6527545","sha1":"4c5b5b919985a9ada8a8a6b9fc5fb13d9f46b5b0","sha256":"86f84735422b9c2b4116c2abc39836ae46d06b2c7c55df95c84e5a0db03a043b","sha512":"8fb9ba1929abc4acb966f60c7921e199c5988d81d4c5bf2be76950d60a120c268a76f9d1fb877642a4cc947f96055a6fd504be413f1e404375385be5fd3cdd99","ssdeep":"","tlshash":"de41eb4aa97f04d702115e7d0b502663119c764a25c481dd0e7a973e7bc842b1529d67","first_seen":"2026-03-04T14:31:41.125812Z","last_seen":"2026-03-10T14:14:14.986195Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":510,"dns":5,"connect":165,"send":0,"wait":170,"receive":0,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/binance-coin.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/binance-coin.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842335EDFF63137D9DA1C\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.266893Z","times_seen":677,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":820,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/waihui/ripple.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:15.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /waihui/ripple.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 69A842347540EB3536798146\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Tue, 07 Jan 2025 11:46:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T04:02:55.304252Z","times_seen":638,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":969,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"excbybit.com/assets/index-h8qrBMEk.css","fqdn":"excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:13.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"GET /assets/index-h8qrBMEk.css HTTP/1.1\r\nHost: excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 06:04:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a5286a-a01\"\r\nexpires: Thu, 05 Mar 2026 02:31:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M3nEYt5YCpsgfUwve26j%2FJM%2BCYXUSTZ%2BbgcsVCqK29A1CongmaNCMLfxGybkjrM%2BfHA7tpo4itsNLaIQod37JoWq5mge3VTUigN5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d719553a81657e3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"1e6a56737009f68c693bb53fd2759e0e","sha1":"25e23602dc8b1c9d01c52d6db98595e18eefaecd","sha256":"8e3dc22c2328393c3ffc1a47656015ddd8ba6708222ef84cbf801f3db0f353b2","sha512":"0ab1ca1f12e55d04aedc1d6896ce28608fdddff410a0869fa6708799bfc408f6d3a60bacd335a24147ffe7346dcc1b036f88df4d1826081ce4a249b7f532f36a","ssdeep":"","tlshash":"ab51108cf69e12384d3beadbaf885a8cc0007e51f446dd85f457470709cf6a3162075b","first_seen":"2026-03-04T14:31:41.12837Z","last_seen":"2026-06-01T14:37:24.224354Z","times_seen":10,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qtapi.excbybit.com/api/common/getMt5Amount?coin=xpt","fqdn":"qtapi.excbybit.com","domain":"excbybit.com","tld":"com"},"ip":{"addr":"172.67.213.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"excbybit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 03:15:15 GMT","end":"Sat, 30 May 2026 03:15:14 GMT"},"fingerprint":{"sha1":"BA:E3:D5:03:29:0D:58:92:03:F1:2A:C0:28:13:B7:4E:6A:FE:D8:3E","sha256":"4F:76:0C:0C:44:72:C4:A3:F3:E9:F9:46:38:7C:82:90:5E:6A:53:21:80:7B:17:48:48:CF:B2:C4:3A:AB:CC:B2"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpt HTTP/1.1\r\nHost: qtapi.excbybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://excbybit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 14:31:14 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://excbybit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZKKh8VIppNpXx19Vr9%2BEZpCq%2FcItAcq6NmI1IvosK6pTD5hskn99Z%2BKz6L9ABAeK0Z4NES%2BZ99yRxwzyIB4%2BQJudfaiQ4R1mI9TojOEHFjwdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d71955a490d57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fac9245f092ec3c6e82df4a102d4e9e6","sha1":"6e81282e6d36d36202f89c19f47bc18465d93777","sha256":"d5196c51e2af048a0cb5af73ac6ea4a40719c5d89bd3cf606b00309ece737e5e","sha512":"f1f78ae29c409e8087721dad1b0fded582aa259358a282f28c5e44ac6f6dcc6a7146efdc9b897f909906fa762c35be3bd936597d1100ff28e96f5adc8837321d","ssdeep":"","tlshash":"249002595c1c8242a88300e5950a1704042431a02624d34c4c59522580c81a22054858","first_seen":"2026-03-04T14:31:41.129676Z","last_seen":"2026-03-04T14:31:41.129676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"qtapi.excbybit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ysviposs.oss-us-west-1.aliyuncs.com/javajys/bbeb0d36b346420bb986316206d3609c.png?2.0.1772431467216","fqdn":"ysviposs.oss-us-west-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.114.122","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://excbybit.com/","date":"2026-03-04T14:31:14.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:48 GMT","end":"Mon, 08 Mar 2027 11:46:47 GMT"},"fingerprint":{"sha1":"7C:A1:68:E4:61:03:66:71:08:AE:F6:78:F8:C2:5A:11:7E:DF:A5:FA","sha256":"30:E4:EE:88:88:89:2C:CC:75:B8:CB:5C:EC:AA:49:00:DE:55:3A:21:CB:96:8F:91:71:88:EF:5B:F5:4F:F4:1A"}}},"request":{"raw":"GET /javajys/bbeb0d36b346420bb986316206d3609c.png?2.0.1772431467216 HTTP/1.1\r\nHost: ysviposs.oss-us-west-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 04 Mar 2026 14:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4123\r\nConnection: keep-alive\r\nx-oss-request-id: 69A84233E901193739745C28\r\nAccept-Ranges: bytes\r\nETag: \"4B37F886959B0F0DDDECE2D1B8CD9151\"\r\nLast-Modified: Tue, 08 Jul 2025 07:24:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5744227249982487757\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=bbeb0d36b346420bb986316206d3609c.png\r\nCache-Control: no-cache\r\nContent-MD5: Szf4hpWbDw3d7OLRuM2RUQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"4b37f886959b0f0dddece2d1b8cd9151","sha1":"5484b3f98dc586ed519ec902e64028d0548de713","sha256":"83d4f756a2c23be2da779895a339eb0873d4b6fab8c51630a4f65095e775097d","sha512":"1636ede9c05b64230c9bb9b35a262bb2b297742d442d0ffff79ea7c91bbd076ecf1a84a8f7fa45fe04e158a9a0ec73c5f4116d209cb30de9db03fb95ea61f2ba","ssdeep":"96:tHhZfXpYbD5jjx8RCX3vRyFQgug+RYqORRBE8pyNX4JUL4HOe:tHb5MD5B8RC5yAdRfe10NXQ4e","tlshash":"7c817d75574042eecbf9bd414348053a92fd2358a6cac07a4e3ddb78855b60c17ebaa3","first_seen":"2026-03-04T14:31:41.018915Z","last_seen":"2026-03-10T14:14:14.936259Z","times_seen":7,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":659,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}