{"report_id":"f285b6a4-0f9e-4822-adec-6962644c5b8a","version":0,"status":"done","tags":[],"date":"2026-09-02T09:59:05Z","url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"172.67.149.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"title":"404 Not Found","dom":{"size":1197,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1075)","md5":"adcf9024dcfff2f8edc6daf775da74e8","sha1":"92521f932854990b3976087a2d3631548f7d4e70","sha256":"edcf113f2d0c1245e3c4e1616d9cb7ad4583d70e37bace9db2c3bd74660ba4f0","sha512":"152094e92b6c107ba7af33f91ce1dfecd650a1afdb1860935ec70c55ec0214432117079afa198be4b86fdd50bb9e2a68e5b325ba3fbefd5f142d30d2921fc94b","ssdeep":"","tlshash":"f92121783a165134c986514631bee3ac39325026be029000c2acdc29994ced354efebe","dom_hash":"domhash371406f12b451015b9786a6154248870","first_seen":"2026-09-02T09:59:06.401273Z","last_seen":"2026-09-02T09:59:06.401273Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"172.67.149.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T09:59:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-26","domain_rank":0,"first_seen":"2026-09-02T09:56:15.65388Z","last_seen":"2026-09-02T09:56:15.65388Z","alert_count":6,"request_count":6,"received_data":32248,"sent_data":2915,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b48a1db3f78a3959761210ff43d9fd7","sha1":"584405946e258d8dabb816a536c5bbcb036d51f0","sha256":"8aa66b3fddacde5e3e05bbb5cd435f7dbb65165daed1e83d5ef7ed9c224584b9","sha512":"79ca0fe5d2e3789e82d2fa59f910a2a4d90b6a1eb0ef77e2201b1ae57b8c9f3488c1387030e99411f951ba236ae7b2934632323bf9828a20d6318b58f3da7d37","ssdeep":"384:99rdywUBL8qRiHywpC2JRVJsGKy8MAK5y77P1T+:99r8BXRi1TPsGKytk1T+","tlshash":"a39273ce35d5b485a3d6943c016b34cff36afc58252c4949d92086ebba30b9d57bac0c","size":19955,"data":"","first_seen":"2026-09-02T09:41:00.799873Z","last_seen":"2026-09-02T09:59:06.412007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a31064539bc5d4bd76beddd455dd7c6","sha1":"811474ffe824c23ac8c6bb45dceafc3c3547a435","sha256":"589efd3f94a56966b5104c732eb99a0521da2375e5825026bdb0b0bec9bd9b54","sha512":"be6c14315647e0a67a0d37de5d101feae5c86a4796cc23fa4b91b7969aeb2f39e4c1370a8a2ef3fd8fb86dcbe2d221bf4c70c440be756715411fe6e8e1b510d0","ssdeep":"","tlshash":"ded023a52975c43055e8034620b9d3d83671306077117a00c1d9cc2f9e21dd354b559c","size":217,"data":"","first_seen":"2026-09-02T09:59:06.41434Z","last_seen":"2026-09-02T09:59:06.41434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T09:58:37.324Z","timestamp":1788343117324,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 09:58:37 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 01 Sep 2026 11:21:35 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAUiGComakudCevebpQl7TAvqIczmuD%2FaC4r68Tdx8Y8DAh4adrHnwkjmq1K%2F2Q00DkqAjdLmTcFf6JZ8ZvqR1uWvRuU3cB0%2FRgWKsUe3afzYrqdoJOcpUUfMuDXK5tEBSAz3hDbIzg0D9rW3sR0R%2BSqVqQ%2BQBzSoAnVbdGxCmGQTYCw63a4ZpU%3D\"}]}\r\nStrict-Transport-Security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: gzip\r\nCF-RAY: a34ba8435c3656a2-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1068,"size_decoded":1281,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (945)","md5":"532c14d29b5fedb883f15a53bba73251","sha1":"cae2584d0e0378895f3420c547b06f978277f11d","sha256":"267d2d78f32025ed72327842ed5dbfe9b950d6a091b0d238042abe04a3444d88","sha512":"11c480892e9d521fd19a4e52be2acf634e1a3bf8112628379a444fd73af238b1f1ef4f6592c1563431532f8da85d07cb1b2da830aaea46887d366d5383234ced","ssdeep":"","tlshash":"ed1112793e265534c9d6414631bff7a93a3250367d069041c29ccc299998ec354dfebe","first_seen":"2026-09-02T09:59:06.407403Z","last_seen":"2026-09-02T09:59:06.407403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","date":"2026-09-02T09:58:38.046Z","timestamp":1788343118046,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 02 Sep 2026 09:58:38 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nServer: cloudflare\r\nCF-RAY: a34ba847c96456a2-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T13:16:51.823302Z","times_seen":18236112,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/favicon.ico","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","date":"2026-09-02T09:58:38.048Z","timestamp":1788343118048,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 02 Sep 2026 09:58:38 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQMrwWsSCfxD9kZvjdIZgcDWEr%2BMGvI6zKznygb6EfleOn83g05WA8Toa6LSD4FZbcyeW7B%2FsggXfvo2I2fsERfDAnlINecEDHcH9j3jk7ATvbsQqJ%2FBHKz%2FgQ0B2b8ssJIRTwR5HImuNPDQ3H5G39rZ5eP3LOZUv6FVE4yoDR3N2BZCKAq3ZiI%3D\"}]}\r\nContent-Encoding: gzip\r\nCF-RAY: a34ba847cb135fac-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":781,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-09-02T09:59:06.410604Z","times_seen":39259,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js?","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","date":"2026-09-02T09:58:38.075Z","timestamp":1788343118075,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e694063b5082/main.js? HTTP/1.1\r\nHost: ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 09:58:38 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: a34ba847f98d56a2-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19955,"size_decoded":9413,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19955), with no line terminators","md5":"1b48a1db3f78a3959761210ff43d9fd7","sha1":"584405946e258d8dabb816a536c5bbcb036d51f0","sha256":"8aa66b3fddacde5e3e05bbb5cd435f7dbb65165daed1e83d5ef7ed9c224584b9","sha512":"79ca0fe5d2e3789e82d2fa59f910a2a4d90b6a1eb0ef77e2201b1ae57b8c9f3488c1387030e99411f951ba236ae7b2934632323bf9828a20d6318b58f3da7d37","ssdeep":"384:99rdywUBL8qRiHywpC2JRVJsGKy8MAK5y77P1T+:99r8BXRi1TPsGKytk1T+","tlshash":"a39273ce35d5b485a3d6943c016b34cff36afc58252c4949d92086ebba30b9d57bac0c","first_seen":"2026-09-02T09:41:00.799873Z","last_seen":"2026-09-02T09:59:06.412007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3125,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/cdn-cgi/challenge-platform/h/b/jsd/oneshot/e694063b5082/0.6636488284119894:1788340521:Eodx0egOcXqIByRvt0ovvRo_-SC8c8-CT4RVyL7kz8I/a34ba8435c3656a2","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","date":"2026-09-02T09:58:41.265Z","timestamp":1788343121265,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/e694063b5082/0.6636488284119894:1788340521:Eodx0egOcXqIByRvt0ovvRo_-SC8c8-CT4RVyL7kz8I/a34ba8435c3656a2 HTTP/1.1\r\nHost: ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12899\r\nOrigin: http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12899,"data":"WDS8tjh7nApBlNDouAOpSkVJ1dL2OPyAqddvkW1r8CO1Ss6+S6$5z220pj9tCeK4BNaEXyx8xJqp-c0s6NxfxaTDM7igJEo63cKpCDPoSp2R5dkpLe3I3jLYZwLWJc-cIl5Nru4XL7k$tbZ9nfa373ocpl1v1v8-BYPrLINNwytmx5a$uvsB69NW0lmJf5sIe-qES5LcxcYH44kghv6+vwzlvufIt6ddTdkXbj4211q0oXr6oa5PKoXrfEZBdElLYSiJfwyCwsZrrcoV6o0+kiFQ3jIQrbois1xezeqLuXLJ7n9J9qTHtV-5yw5SC+TuSmaT7kaSfy55xu2LyvqT2jXoBKqoIg+RWIAKCpbjNGYeEzJ$S$y4SJ0uIESKNNpvcTj2WDe4Kxh9eKFVkrjuDWzj92iWK7i6z0gVrF4w993hE6HvhtSbL+j$3Kxzd9ZLc7MzvbOt13udtQM2dyBFKGvhEA8Ax71lI8ERg$AeH0bZh7zRRsPZy9O22OTrCGy6QIWEuhHltCG$CwhvL4Yl8Wsu4hhp2AAnEjkJiPK0S6NAj9h4yrqZ5a5Doz$4HzFXd0mf8Ofher7fAJrQ1ZKqDy846bHrxL$Z1lcYBJ8qRCv+L9O5TZZITNDVi$2-+TIqxtA15dvGogoHzI$gF22lV09WwhpyOrGE3gl$6crPysbPTF6MfCWQiLbM$veKaSozrjhxdgZx27BkgQECSHLegjXBedMTO7lZRGe$emslqD4YSw1DgJvZ0AwDLaWuuVK3V7JYs1g0bp+pOzggiE63OcDPi-CnAHMBFP$W6h99no2m93QfinKwvmbeVk82Ki$fengaW-ZnzNsRnpqyY61tS66ODhygtKemWqZy-BAMeJAqOc0XM+9BBg$4ArywuKCnNqcC+NsRQqLKJ2A0YwliN6pI5COCwER$XyJ6RFb2Jp9zpVCdZYT0e50-tWT1Sr814KmuEtvR7FjTAROgzbD8wF+qgkRoc2cIDr3lGuSJ86rL9JivR4Vl5FShVxNzI+K9YcwCY4o2fPbo+13JipTNlWg87au3ovEdLwncjfv04sTPkmVigDLvhl$L2C3IkR-DnPq$0kVP5V-vfZW4L4i1ixbyKZ9R5qL73ARQz1PfkfkkpQVSD7l+G5wY3yurkfyuVidbrO4W9lYJSehwCsOZcd0RCS6ivFlsl8FnfrBlJ$6MoR2HvYyRDPfRGEH5S3+LKQwA60wC10MZuQyRD6x02R$ol-ZuOmNIbMh2h5AZ9io-GNKjAhR9daz6nYD2GgI9cjoQjs+pl049j-IvNrq5svOZpl764m$ZhxZ0R6c+1i1bqtXpCu198GEvGQFi5KPlFhpORn2ROWJ55LuReBYxzAjTPHudnWltR$WR3rX$CG6x5uf65bWkxQwFZf4n8dtYG9dLO0TozgCeatLF75pQ6dXDobmvpnQaaeJW46qCu0ud2daCWlLy7HehH5mGRTOsuPlmyktwrKFLRTLs0D0MEHvoYxATMG60m24wECiasFbzAKk8cFTCiyNRaQNYeKAI1X-3I4LlDl62m$EayYgKD3lrOxAVV6lqKznAODrf8B$3Pb0vAPOsJgFWK82Ll5yw6vmMQRfadIHNrvNc$IqWAHbyXyhy+4$i3u0ikT5erieaXru5J9jmNP1lC4aWN8KWAIwuzvAGFyMJqmSvWSmdgDwymK2IDsNckEzxdLgVNYbZDSc87XiDNqOFtRWXb9vJrCo7okWOLyieaFyhTb+z6v6R32D2Au5AMuBeKbu4-8khYqWZxbhaJjZJNpyvq5579ZK1c46Po7VGEepT91PrbnLeCRov9Wk67VBAGwHsq31LPd1iOlu$WyiydZeK158+d6kYMXcm9S5qgZ3HriTMx3wjYLBcXmaDRq8tjudTCSA3lQT+T$nAbkZNcuILiqpqhpoyeeVEKhn8oVjpY13KTuLoWzojt0+hA5mief$JR7K6xig8LjKgVtvT7ck8AOFbxrxrFdbthIn+LR3$LrsoMREvSa1S19a11Dy0YT+TVwC8Kp-BIQp$atIHhQtPGWN2k5duor+NAR4N47GIYIiX6DjoO-Ps01XjcYkqowr7IyaRDaOZX35RYsA$BB9QcIhp0cJTkKeq2ZJlieHO5q7J-RpqEu-X1e-YMdMHfT$n4yhn-olvwJIBX9AsuVK7o8aKKfBw1I5A1P4wOFg$cDtQc5P+1xWJa2zfLnJHZWWnXFEiVyMo0yPvcI+RH2JLExKuNVpOEr0jaLYw4-CdA8pbLX0DEtPV84jHZ8VMe4PzChvWaQmf76XPaGNyRCekFgHoxVS+KQvCOJqt7qpG3iOutJfgZRC078V3$E1i7ydm9-C5P9oXy3fcgmy6djhsNulusFBXq7x4uQYF+-t+p-bAjQNMSsSzxXxsm1u9izAnvK5QWntES1LvMu5TnAfLnu4hxIt1jLXEGfBJAteI-YGdLO62QfsF0q2s58CRbQLk4cSwwWnXftO$9-B7s6wNcXpSpbJrpJekNoGP71ZfIgLulj70rXpIGszJnR4QXkWJW-aRcSGKtrHHB163CMBhEpJ3KoIwNjzYHqXHDctS++ussVXLl7TIPsdvaCcil9iqT6DatGq7V3B-Z+idKRA8duMuna+K9Bmi-Kx9yW5YxnnQXzDwdSu29u62qkvVurbw71Gkp7lOC0MLd3XiaxZQrsu5nVuFKnZ2+oHvhTte1hyknBeZlTX275ILZW38jBLk1HpVNd0kM4ZW6HLIt-h3tIQlkvqakJp-sWnOc5h5KmllM-acZuxu4mB8kA-jLQG4C1n4FX2I-WBLGcjzbieJPi5z5FYJqOJet8-b643n8i4syRnYZaKkGZwS3epI0o3DekFQlgQa2upkwecJmIo21TnTHhgjGal9ffPoo0pXrMH-o8VQSuDpXGFosDocao0fmzkt8fp28IcXj19ifM4+QACa5ypZjjez17OkuO+CAZwOhY8GxhYc8GmdqAcMXs$KMpRreLboZLxNLdRDz-Ja0OSFLvk+Qy2GFrG9xQL2n3u8-AyM58mBik89VbaEYgd5i5+Xi0DbIW6hghSmMqf2rKWoX$rwi4uE4SuIJ2$tYvou8Mbnrmh541FjY2Cx8hRyTHOpf6OGz+b8jz18pdLj-REBm6rpf3b-Ze9mY08ggZL8lMS4oYW36AJwGoEAWvbVJv5FIe6HA+Xozq4L7i7Cf8pMvFlxwqQK4yLqLsQGNQhRSGM85VlWRrYH8ZsgvKb0l$HWJiXz33qr64j2mSQ+59uQtsnEzErkxWLPLukaj7aw1Yb0wKuBH52t1hQRsi04$PlTFZFIzP6O6un4ShSqWM6DVHmEtAygBgQm3lB0ixqulMxJIeEZdlo-wAVYA$NmP4DfnRfM+j7J--v5dv8MPEy1lkoadJW7Xg7TvMQYsyYOTxZE6D8SltZ7ukCSb2FyGeBgvT250n63CEtJ3HGyPx+vVmkBV4ON0o7YY4$cN1hJX2NqFuY9O74M4TtSGmijkR-RztLe-pGW3tN398A5yjl$1eIc1xunT+7xPaDeCCXmkqcl+BurZNKuG+PHpObHnuo-PoEoTtzeTF9ekehB-o4LNWpWDIhiwnMDc7vi67m58bR-jgiQkXRmAD$x8QxS-opWcs7-lqP+6HakcXGEkONdSG8KkJPQ$wdRAxZozD73udzV7C6BXhE6DNhCCs5frsAwB0iRphnZ-LWQWV15uhX8XmKXuZAPbuZ0g$lnJ0AA0DtsZ6hjMucm5SHcxpkZzpDq63Ea2fmz-WR6rwwLE05JZRjzVCfJenPyVOzbl07ac$aC-DQkf4p4Cfns6Xw8g9hh$uAMhlAZH2qdpJfqWJfzXAIR7QVooBSiV$7cvad8rSvQqqcs1qV1KIgXFi0f+g3GJKtDk59XcBQOMl5r58HY6SwXOZ+HH87tv67mB+jBYcTd9rh$Qixhg+oLR3wFuvke1lnfr5CAZ1VNpM5OIhxCMHcwHZCH7n+2mW9Lz3loxlysPOSAcNc90SWmyeGeQ2oe3BmR1+SeIDiBc+z-81oKg0HtANM2molINMnEfYCx17MnvQQkhBy9$7y1OzIjoqRhGA5LC824a-R-dg+xQyenwNhuCQdOas9bL+uSqsDAo44c0eA8xv$qch+oWCVVSRa9KB-5qhajs6yjJ8v+fjLaVS6Eh6Nb5XQu3obo2tIlnqWx88QaSH1CQcRLD5e24i4aNQC83ftEdJonrqLIacSpwfO427B6iu5RnJPjYek6XZttR6+t5ybk8qT-s6hmXXrAfcCmEFgOJVELV$B0HKti6jyRFeodTACNPZmsDr6-+Y+zrLZ7-RFs1jKwZJD3d3RkpLI7$x2flRDLODPJEdlE-zooZywRE8BWAJYYvSnKaf-BdxqMOuCEOT1CAH76ClgmZmKdgI1HmNw+jLzFeadHnIIdj4Ebal555shszlED13uIThnKEwkJrg7dxlzkMJRNPdi+6j5n8LuGPrH0mybzyLkgj2AgIkh7-TC1uhft+f24P6Jsu5VTGBEum4CIdaY2hs0lNJs-Cu5VnJsOhcDwlHqSEz3FssTR4KxIQ6rsb-vElRHpnjP3rPNSSed-uuDla1LPp7oiiCyfePw+CwBf4DJRw9l0c$hklgGfhQljqkSlRcNEqDp6Q0WMka3zM-PXWyvK-hez8NjQzHwZHz$BNeER-3SQmea576ngsJ5eKqELGV2O6PX-kwhXk6edcmz858g3bZ5g57MkrLALFY5QcLTMeuxOfXRbsGzA-6xXNKJV$fOekdsd3zynccYwEcZ0H9s50hPXSz85B0cjyQbvG1eER3ths3ytXs+JCCj0cCmg9WCMlPHpOGsR7bBPDdTZ$ver9LxLHFXpGRMgDdwYBZuPc1q3l+g$yYZHd91WJPdsdmJhK7y8LTRQ$0$dmDYfQ5H$LeSf4tOIY8dXcrXVYC77VdZ$kCSNQmvzR$akuke96cR8aHxT3WWfsJVj-plGh0Hc4yo95TuSjklcfkncR8+x-hNBtk26OPvCJbZGxtrWxS$8w+4mC$GEHhIdAQxyv9A7zjittwQm8yBaOgPQJX2ynPOQL1$iEAAhhEWS6Vb$nS4Czy5PLnFilq4eBItC$997oJ7WaLRgC78CNlyGgOfNvoMnIvfiDjAK2vvMPiED2AAnY5t20v$FepQuW-oICLRvPqQzttEXIH6lw$PMBlWzc4nqy32dSE8mfhApq9KF9H+LBGcp5rZ$6jo91sy0J8vYDkm1hd7EuCaacMa6Izdu-dRByi7JLAtl0h$q9YoHruiQ8BXCtm7YtKognNvgJm-OkJKvzrjGG$QYEOm1Hc$X79Yp3vtWl8AZcm-TXxGVvKuF4X9i5WdqswC+PZlSa$5qZFMu2L7HLqynLaSLju7jVhLTjR+gw0Sravf1tSa7CvxpiqM0XKVVJ$DrFovH+qv1TJv4drqbWAwa+Z7DAq-y-mitrbSqB4YQsDhgqTAieMC0$ExSA73Adr-NK5tuxolSYHQKK6gn1LC7J8$8ZXmbqzOq5bjYibmd-bfAXiK1D6XLNbIQDGk58uJ3rE7MOqgidAAaLE4z5CPtMnfXWD9lRKNM0gcs7F4m8VzwtCtuoyCwxmJ4ie2Tua89NS$dswSb0b2a65Oeof8pQ8mzmtG6-thMW+vcyru7F$2fN7BxYNX00IDHp-CVbgepuXSc9AxLBcuR52aVOYbK19lIuWOMMRBNX1JneY5GKvqBNfShvd4XqIIa3wwtF4vL0n-zT98xtLqwhzqYH-Hhk+TYhEvqHFfnekbwjWqJN2xMs-qeS+CysAK+mhCnTj67$KLCso4qEF6CFV4wh7zh4K9z$ALuP0syWF9z8C09idAwAEx+fEAHSxF6TOo23c+nQB9AbHY2n7TK0LV3IM9B4lBnmhemGKWVYdIef8FJ50JwD79mfYr7LLj4L8X$jNG5EC5i91170dyDbYIHeR3O84IaNstw7+RO$L8Qagn7mOj+NYDOCM7yIiGsPh6g52ortw+N$brctxhY1OWX$HOtR3n76qCwBIfK1H1J5MWn2G+abewwIDmR8MsEvdjvwyhYs4iQgc6lsGHwdKnRYYHEkqbWgrVhYrAdK8R9ZCjm3+TcmwBToMpp32TZoXFKSQrhRxK11iJusbSOGugMkMOMixVHLeRvO+DZQi3DdRpaSmtVcAau-E3AySySW8boOxDfWb3St6BgeKZ5HeyP8CLoOxsshCas-Q-iA$8q6iuj0Zo86IgZ5dsHcsM0t+3uJGq5ZQvCrWv9TfaNPiqKCdI64zdGao$jS1CuLHK28vGaTExpIqHJEp4dcsLJq$K8V8E-HC16gbPHThb9$3xfFAIphK00NF8vy442jYAunZRFoFjzdjE5qR3JX2HB547-AQ3BbuL4+hBJcmTZScoWsuTq9F12CySGPYwNHxAZEom$R55b1-$DZ+IghND7QWJvuqCYw0ouNAF2O2hnYjdnPTVvsqo3z7FbJyLn8VAr4n62pbxKL04o50jypg9xP5luIMKAlHg6hbkrOxA$TlTXw14okPtqbvzo5H+JRyBLdvM-wFtS9jGwr1SNIWgSGb7QWE-Dxp-omCcJ69IzTai8siwi4gWo1DnxGLuYoF0alHZxjEcnVAG8DIigSGVZwT6dxWB9msd50xtOd7oB7R6VMvej+tPj06NQuP4xqg54gy6PezKzS13f1gHaPKrSACnv7B++d3rIr$xWkeSj9q9WgL0Epx+XjB+rqrW+iG4fRrm8T$YOmfNhLLNtzKHq3RGJQqSxr$oCWSjvL6Efe2ez+JiQ6uPCrOQKyjzOXJ2TwFPO-8L94PzQ172+cGigp3BO2EnCozeN75a6J52Lf3pStLhOOzFMRLwx+Qv0IztCXOXsnxR+WiBHqcqojKvvmKSWKDDhV3gzibnIHJ4Gb9wcDrMekPBnoYZMJhGZCxEv7GW8pbHlkl9Yr569aX4q7n4GFOQE+eiXr3pA0FO99iz$s$IpqHR7u6bZuOO4fFEP9DM$LVwp15HvToIoMoMrC0Cg2ZvBBg9bMHWYJuyZxV9vgm$QHNud$a1WzL51XOHcKdMRKN1TLn8oE44sGEO5WdH$JlLV2G0Az-Wp20u+inRoBdDBkPhKMkVtAKbhe-eadRtv2X$u18fafNN8eC7FfPV6MhReoCRLosbtLwRXMWMbfrZFYYWiRTTTwriMFZxZ0FSeQsLXv1f5B80vy$Dx7KqRHHny+Hq68XVdDT$mxW53v1ILkWFZM5+MFXPFpqqyJJt-dkKcBHoTckJr9NhhoVfxdQwSr+tLkw7fHf+jOKgtwKk$QI9lHPEEp-k3fA7qEMxSRBzwM+5L2KevtWz8V1BhYRXHB6VBrIYV$smXT+0JOYuP3VHpostY$oak3JrnRx-mfEZnuScEedL$LKsXoWnTICTP0BuyLT9Xmm3d6lLtlSv9pRtPviOMES3Kxx2mXdpxwubYPlwv6xIjaStNOoDl+2VB8A7YC+kOEm5Ifdw06wfiF-+SrgJe4V-aER8B7+EC2cNjAHq$aWIsJRmb4RWIlYNcSJ0HLLTqO6DRp85MmmA6EFT0th1BE$4yrnek-XByjHuZmSGwjgzdQwgRDECYBxKzskE+rFPLCB3IY7keWBySNtF7dbLudd6HmPWjcAIeCnMIJkYR72YmEpGzj6yT7SS+r05SNTGxyTKQNOD78KWGRevqLoHDOr7pET5W9O7VKrgPae-etbrxr9zbsWYArqgSN458-qd1PVA2vb+MwRsYkJxQV8dn264ZRHW29Q90Hal6sb8N++B9gOYYrxfadEftQ7VOP9njmsyj79ZpO5m78BXnLQwx5jyy+lELuHXrHHDgCSLhcCEVxq7qyCKWMAhHNTbKAOWTKKpIb03SfHHi3W14PTpnEJbRF6snVM2AvkTomjsYDNAmWMH$NefloWNHLbtARRECRfo1cyas$zDp4sR9mYO+TsOhxnDFuMWfWFuQ$u3G2iS3mS3VxF4Fbyh$nB1-6zB-KRu8$OkhbDJsLkjEiNIfQ2JjiuaLOwKS4vcYBf5IaaOi0RsI-AV5hSLjH3PXuJQm49f1GwW40bRgaitOw0mTo+kiybio-g0lTA1J714I+4Zm-ViYTchnfuhxSC0$fyPNezpO4DcS5LhJnt0hD95Ni1eHpKxP$87aI7+HDQRwWGXN8EKSJN6BTd3FywCa7Lzmz2$0H$kvLVF9WCcCYfC$RYqeY6zlvYSyYLm8v4xEgb9jZyeeQr8Ew3GTOsIIwOIiVh$7bfnPdknClbqnBvddXsefGMyZvHMOrecgaG052AS9-2PSX-+-XmaR4p$EFNC$fX6OvICI8aj-lEhzRRrC3rnuPC6H-cJYnkzf-Q2+-ZShqKRM$g5u3uNsJDDYn4iy9QBxRSWGMR0DZOMOiQ+GyHB05ZXliMQA+EH4FmcT6JgBNnebg8aC0NjlQFyLgz17lHz2XI3KwQqJRrQr2WxckSuC$Qn8zZZ7tFPF0XlBgREEjkpGCHeRNMMiXpryCGDsS$iuyDxCQhuBLXJ3GReBzvytSfktBLhVyJTWqHJP0JCXO1-CJ2e+vMh9oKL0Gnc0vy9qbqJ3w4uk8QocP7Na0Gobz0A+HacCSTlN6KbMd2OoJ+eI-yF6tO-V5mmq-815Lx+H487xmvCXj1evkvfEHiZKngt$TYboyzIzp96gjwdOujjh$Of46R+6NVjaud-FO3ogmYyoEDc+yz6nEIOIR+FkVLiIjnxqoGkF1V1mmbMyqZejkn1zarDo+SgBRInwNqZX7$iPXm$jXP-uLDeT1I9eCZwCtvzKEJZ9b4hMhX8Zxkh3ol4DCkCr3XTo7lNsd7GYS9xFKptaXRpH7xZTrER--gGtVb0F4NVo1emaZ+saMZMn-A4fA+Bw1MCS1bm7K+N0JnsVEqxjL94vK2kDWznJVz$w6LLAhL3a8OIlqJHd0KuQrsPYVVStA5ATSXTFpdpM2Qtho$EXcnvB+aPNu5DCkBvWFh6SqcK1Ky4-dYcO1Gs+vpMmrWT3O13jc-Oyciswm6PBlsY1+y8J8z2edimMtStLE-0$ktc$QDcoMtza$XZStwDnfttlqFKaMI+TRv-hWblnI2x8A7Tt9X10kPn8HqQF3uzmJkT+3RsPzbpKnPaMx9y0D3p4v8EgTcbr+fs3k1qjFJb21rAMOXtxJrePuDDsvy$7IFF98PdtpFZ2T92$NaGLrf1yYQ+EyZNbip10JwsjW9DbK2sno-T4f5ziqBWyClxFvqpKITvxlilsV8mq6HkxbJ2$2ub$5ZXWn1Qf95k$e24OMLI+Foo8Zvsq+He+gEzTQFMqg727AKTWxdHPv1eP4RiXWnOC7qJyiT$hgnhakZ2GnReeZWsNrN9j24uzgrvs$5vrbRDXGlomlVEyRz$w7ABVT+lVHaKW5d7gxee6g$2V7Wg14$gZFLR1RqFhHO3IbTESjPOt-KfggzXBoJsklVDh5RZy5CGCyyw6$YCTLfYz59xlMmZKA0Az2cHIQrKgMFVEPKxKeiccbfw72sOA8jKvMj6+utJMH4Tjrw7lq96wNvT2+49d-b32iJ-N4YW5gFwSre$iKhAMiQuyjjPuYr7S6m6lHLbkwytmPke9Pxs04uECp6$q0iDYDD$hepbM$11lOLTZx81Ck3tAo+DSO9FhfgxPqTLW0h41CaPZdIYaOXSDiOdlrpsJhVzZsQjtfC9cu0MOOwPNWKoaG2Oho7wFRV0FYxiDMwan55hS7erjY-uGg9HlF1JvVfpKrNC+dnPwtgw9psDttuj13GkuDkXhPlpvaDivrzgeD34M3vh7vRYehs6MPCuIeGknWZPcJF3y7V2CjmTVF5A7HRK4sddPFpW-$zirQMk5y6yTR+ffGvVeGT+nS4McoIw2958wXRmRGimCh5uZ9LMhyFKzl+EHMJcCRsdV1uqPJvE8aCR$PDT5RQD+oge+lB2boeBVS6N2zMiqD27B-drmzzfMYoI3HTCAI07zRLeTl2Z74WonP0D1ONqAgiKQy2jrFhmKILrOtvMeDKc$yfpK-4RF-yzDWliDeTBFl8t11HRG6WmfZby6jadJNO-pOqz9cJ0luRfd04OkOC2EwjyG7fWFh3wWyqNtxvfZRBy+ZaZXos29j4fkRdrD0d3WjCQD6kYIkCRoi9Du5eq$Zgq1qQ$Q-E1bHQ55d4RQS7Vn+8yYroCKf9W6EBvmVSGa-G2oXIAl7cS4A222GDzTskwP1QP7B$sZ3fBTbNGo8shmP3KFXxpmpd5$rRy7GWSPW8EFECuO8TCa8d325N8$g1-pD-kL8mw10ea41nx-XAiaHbHdhl6cFuubTSVK+edggGpJfTxolu3T9Yb1WQa1oHlLDwQ8wAq9zTH8XbvWQY1+NwZBqdO20eyfcmZ$TpvniQ-OJk+8ddbtwNxYkfRLrjPebPdmWHTT3B$DjIzPeGtfv9uzD5EzRNAZ2TmBamzLjvr5djjfVmfgi3Z8$8+MPOh00jdcKu$6Cu40tBIsKsz-ilFvlkANSVcf+3ZcLxffAsXDdc5qB+Xv2CvWhRHt8uXh35t4H0AnS841ds63HGQDKalhhH1CqinTQc$4W7G6qwkFn-RiwQ$6IIXs5mPkD6SCxSNqiRHNC+CAJszV$JExdhlyJM0SAIKYGcKs6Ff1W5r++7WNY$4aA8hdGuK4Mix6PCs$Mwk2PKrtt9xSQSRQsoJdc3l+$8DXQbRd9VITcgqi364w271gX54iJppkC5SJmMZAYploZikdgeialyGKdrziCnl5FI3Eq1Md641vOCbxaolQ+Y9zdeEAoDiCKAgC55ZhKipmEbEp9TlFdPsHj$vr42PavRc+4hpvn9v$vxnveLVoajhxf6KHON4wKtutpPmMWNzqC-RjKGZ7nobo+2HgjE2Xbs5kGgjYfPiScNsAPlQ6CyBEF8HyDRC3uKXPO0S9NFJA0kuAKQeAa14srlueG6QzFxmlbNt8DWf8OBhHFjvyenlF6V1dWj13ey4Wk-sJSzvvfdwLZY7w4x3FGtXjq-DK79Gmf0u3nMuz1lr7uJIHBQ0rr7z11QswP+NasjrWM6xYCeB23jqnD+PrOV54IQLYy5IObS7HKr2CxrpwhQOpdfBnbQEefFHSo0OTBJxKJ-VghNYa-thH6aVgPI1TAYcIVcx09yC2DACbCHPbI0$h+WszsWMFsxo5A47sIrRyrt08F5cWNDQGBajtCrez-Z9bPcfbslv8QIVmSOWogoTwCoi0qMCq64ytJ1aQ$vHzsv$MPPBNa-obmCoiHVbtZWRO85iiI7rygq7ArBoMsrPKo29zdjND9yTEaFb83+zggFArvsp558i7-uqhYG7rcinsjPjvYgME-IS$$95PIf0Ps1WH05+xgNSGG-P6VzQVTVxzrnsffHhDz2geuF4-Y9IgOl+OFgA+wtMLLJhNlBiHCZ91Zpz$FiJjPvZZP8WzEYpW4edG7ctCsOJzeYaiJq9VajP605aP80AwZZkZYohRTEmiFC3iYFwTMelekMiYJOo$lrkARBJ77vr02SR4dqYCHRj6k3iATwoZ2AKdZRke18A+ZzkWu0$CgxlDKK6Qgt5X9S26t7du4-$rs3gwi7iJ2zlAlT+MzkNlXJSrTCIFvKEhkGOaFMOKZXP+IK1fNDm3vEJxwXTDdnCoZFjjBohuHiiEaKw4Iru6eyhirwDT7mPp7ApXhCOkVbWZu8vWAdXFQGKODIw3HVIKuyd6gkVBu3ZcOdo1gvWunO88jiBxlhZuNbqZinlVZhZpJJpG7CABb4HPMZ-Na4g30O4sW-Ns6jVru-LJ4S3du$i-fGhqX8nGoAqXR6Ge-7QyOGzh5bZ3-wzuHQA2clsrKf22F7KhCqbVk4LYZ3s21DVJYQoi5OoiuHLSfqSEIfAwh4snAfIPygQqMrr9tj6kspn07KzvMspb$ytYKtsDqQgWMz3cgRI$GXQ3+zad41m-5sO3lX2xlq7F4qlyuuYGraC$9cTSwSTnvg7TfGtTSDd-RwLWR6p4skaoxr5nrmV8zrJpqDh7FRo9FkdJw9cMhYJBrQ9XEG9C+vfb7rxJx29mq5GYqou0OzJ8Yt1Z5Gna+K3ncvKHdDE1DkdhkI+KWG0zBWs5rc9bnVu-MCd7-F7f3QMbQB6kk$i4IKiZKaE267kuakNnW5Xyf577XoMkeY-vL-1x$h4llYQM6TgdLZy45k02X7OKbHFYLEI7i5Nlxcyc0qDKDtuuXJ1nVPS7RuE0TDxilGRFoC8gCvHB3McZGNKJwJSMlO6IwYz21r0ptigCbLNOygxmShGt1plFA0H78$K1A$vQ1GIrPxwDEEhE4+zTHuOAkmnz8Vy3+Oiu5BRALpx4J89ggvb1kd+7FZYGpHQzVeIlmmYPsjNmKb6HVtQtM5jBmiDoVLsr9SuvZH$HwutQAk7eLfPM0$+GdqBirN8SyW1QvswLFLy8W6zW0hxRelfeT1yqN0HkNR4c82V7Vc80bPOh$HN8t5zfYGj3REhPMjMI7sBGhtwhg0Hl20cQ55609n9kjObPRPmMnpVj809J5Yrljerh5HxqjX2mIBfc5Gbk32fbgSuSDurP4Vx86IVeKcQR8yegcdn-TlHYideLhwDJnRw$Wq$IQSJeL2dIisCIQoV5ErwV1diMR4C58n+$RfZiizz1KYGp2RJ$gC0fgySM12MB6FEZbpKXNzhZDF$W9oKmxmn$wVlfkEiuvxByat9oj7yweRkJ9iQ3AMZzJjOI5VctXuLZ8e8O37-kbVlvr6NYXiNOHk8vLs6x29aBuPG0T0EJjkjMBWM7w8tCBDmYumyQpwrMtRHy$9DOwgNDAvvBKz3Z0R4nhGt4Aan8DeLye$Qw6F89R+OVJcdtky$jRMuVFnGxahOVTbtC+XlYnml52M+E23C6BMb+Eun5tbSuWcJW1uJglnJ"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 09:58:41 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncf-chl-out-s: EuFZhttoHJkb9PSmSdHxxdj5+ayY1Ikt/scepUz5KPZ7YdK7CLeTRrbLXnu3xi/ycM3w9njwck26qRDvMk0Cv0Y4WWczVCNembNG+cRvFUIxSvsHaCkOusE7p0mFMlP49KiRkBYzxLTxtFu86h0CKvs2NC36b1lTiS3lTgHPRCKFImL9XeAZiZvBqx8fFWatDJn74Z09y1svW4IhDR3xYkaQ4qoxtaE0A79zxP0Aw91CrZ51pZOSE29hc6lTFnX+Qg0rbYXtm2TClNGjVzk3pQ==$t3qFo6FWWlOun+RdNcyJ6w==\r\nset-cookie: cf_clearance=EMS8PIlRTb65x4UGPG9zD0s9VkY7To60Mk223i0ejq0-1788343121-1.2.1.1-tq.tZA_Ff9DrDtrrNaSn8CayVBQX4knP_YgDEvy0K7N5ukLDDZfy02ZA8m2M1zVxQLt0CTxE_diLh7d9tXyluxvMjETIEEk9eesUGlTl1olQJVPPJRTO9ojwHyuNOAjHTCFdiOZCfVGX8NDYYOgv49CFygZ.MQpBu1iiM4OhXp8_JROdMc4emdGOHP2Z6MJtraGC5yAJIlGAb6cuECiIOCnLpaqw0W7Ni.DiX3ARW_gFoa8qHQofkX5uf7FIuHiKZPmt3lRVUZbpGgYJS.bMVO39kmYCBX893WUd.GjG3IKQRcY4dNH.laKU28UHWb9Frp7xM2xiSBq21h6iQ0Pl20eWje6Dbmko.bxyL8fnSwaFC9Km8ZI8QZR_pImJXzsdz8NeYI2dS8AfFmsDKqkgbsedXpXoXd9QP6k0PyvJ2xQ; HttpOnly; SameSite=Strict; Path=/; Domain=cryptoex.cyou; Expires=Thu, 02 Sep 2027 09:58:41 GMT\r\ntiming-allow-origin: http://ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nServer: cloudflare\r\nCF-RAY: a34ba85bea5a56a2-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"EMS8PIlRTb65x4UGPG9zD0s9VkY7To60Mk223i0ejq0-1788343121-1.2.1.1-tq.tZA_Ff9DrDtrrNaSn8CayVBQX4knP_YgDEvy0K7N5ukLDDZfy02ZA8m2M1zVxQLt0CTxE_diLh7d9tXyluxvMjETIEEk9eesUGlTl1olQJVPPJRTO9ojwHyuNOAjHTCFdiOZCfVGX8NDYYOgv49CFygZ.MQpBu1iiM4OhXp8_JROdMc4emdGOHP2Z6MJtraGC5yAJIlGAb6cuECiIOCnLpaqw0W7Ni.DiX3ARW_gFoa8qHQofkX5uf7FIuHiKZPmt3lRVUZbpGgYJS.bMVO39kmYCBX893WUd.GjG3IKQRcY4dNH.laKU28UHWb9Frp7xM2xiSBq21h6iQ0Pl20eWje6Dbmko.bxyL8fnSwaFC9Km8ZI8QZR_pImJXzsdz8NeYI2dS8AfFmsDKqkgbsedXpXoXd9QP6k0PyvJ2xQ","quoted":false,"path":"/","domain":"cryptoex.cyou","expires":"2027-09-02T09:58:41Z","raw_expires":"Thu, 02 Sep 2027 09:58:41 GMT","secure":false,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"cf_clearance=EMS8PIlRTb65x4UGPG9zD0s9VkY7To60Mk223i0ejq0-1788343121-1.2.1.1-tq.tZA_Ff9DrDtrrNaSn8CayVBQX4knP_YgDEvy0K7N5ukLDDZfy02ZA8m2M1zVxQLt0CTxE_diLh7d9tXyluxvMjETIEEk9eesUGlTl1olQJVPPJRTO9ojwHyuNOAjHTCFdiOZCfVGX8NDYYOgv49CFygZ.MQpBu1iiM4OhXp8_JROdMc4emdGOHP2Z6MJtraGC5yAJIlGAb6cuECiIOCnLpaqw0W7Ni.DiX3ARW_gFoa8qHQofkX5uf7FIuHiKZPmt3lRVUZbpGgYJS.bMVO39kmYCBX893WUd.GjG3IKQRcY4dNH.laKU28UHWb9Frp7xM2xiSBq21h6iQ0Pl20eWje6Dbmko.bxyL8fnSwaFC9Km8ZI8QZR_pImJXzsdz8NeYI2dS8AfFmsDKqkgbsedXpXoXd9QP6k0PyvJ2xQ; HttpOnly; SameSite=Strict; Path=/; Domain=cryptoex.cyou; Expires=Thu, 02 Sep 2027 09:58:41 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":14819,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T13:16:51.823302Z","times_seen":18236112,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou/","fqdn":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","domain":"cryptoex.cyou","tld":"cyou"},"ip":{"addr":"104.21.71.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T09:58:36.698Z","timestamp":1788343116698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoex.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 07:59:28 GMT","end":"Tue, 17 Nov 2026 08:58:06 GMT"},"fingerprint":{"sha1":"F7:C6:AC:5D:38:EF:05:DE:FC:86:79:92:01:32:6A:59:C2:9B:86:37","sha256":"5B:B3:97:4E:1A:0B:D9:02:5D:F3:B2:4B:E3:74:16:7C:36:FD:2A:9B:C0:D8:66:35:43:ED:54:38:4D:5E:5C:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 525 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Wed, 02 Sep 2026 09:58:37 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-ray: a34ba83f79825a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7244\r\n\r\n","headers":null,"cookies":null,"status_code":"525","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":7678,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"d3bfb865c634337b6ec65555beac3c30","sha1":"c1b5bac65e50befd290c65f321de470d66f49feb","sha256":"5e44bc2091d472b63bbf231d8c7e9a68d53f98a9ba897ec3f088fbea149af926","sha512":"a606cadd858f513a79346850bf346156dfe377d335f5c3d42e293c6eda11d0c68fe6c7949f003e4ba37f9333b35a08b775b3a439f320113f50a371df8f0c1f83","ssdeep":"96:1j9jwIjYjqDK/D9KUVG4Fh8/G4FYE424FJ+skKmoDmHRWS97RJloaQxP:1j9jhjYj+K/BhecDVxD297vlTeP","tlshash":"9ae16671b1b5227a0093819236a5ef2969f0c717cbef058473dcc6672f9ee81e903294","first_seen":"2026-09-02T09:59:06.412749Z","last_seen":"2026-09-02T09:59:06.412749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"ei31jwqd12q2121322e112-dashboaord-for-ex.cryptoex.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}